Alibaba > OSS >

Bucket CMK Encrypted

HIGH

Source

CloudSploit

bucket-cmk-encrypted

management console

Bucket CMK Encrypted

Ensure that OSS buckets are encrypted using Alibaba CMK.

OSS buckets should be encrypted using customer master keys in order to gain greater control and transparency,

Recommended Actions

Modify bucket's server-side encrypted setting to configure encryption method as KMS

Links

https://www.alibabacloud.com/help/doc-detail/31871.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.