Checks whether each origin domain name is in the Object Storage Service (OSS) domain name format when the Origin Info parameter of the origin domain name is set to OSS Domain. If so, the evaluation result is Compliant.
Scenarios
This rule applies when you need to use OSS origin domain name. If you want to use an OSS origin domain name, you must set the Origin Info parameter of the OSS origin domain name to OSS Domain. This way, OSS identifies the back-to-origin traffic that is received from Alibaba Cloud CDN as CDN back-to-origin outbound traffic. You can obtain a discounted price for the outbound traffic.
OSS domain names must end with aliyuncs.comor aliyun-inc.com.
Risk level
Default risk level: high.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
If each origin domain name is in the OSS domain name format when the Origin Info parameter of the origin domain name is set to OSS domain, the evaluation result is Compliant.
If an origin domain name is not in the OSS domain name format when the Origin Info parameter of the origin domain name is set to OSS domain, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see Incompliance remediation.
Rule details
Item | Description |
Rule name | cdn-domain-oss-source-check |
Rule identifier | cdn-domain-oss-source-check |
Tag | CDN and Domain |
Automatic remediation | Not supported |
Trigger type | Periodic execution |
Evaluation frequency | Interval of 24 hours |
Supported resource type | Domain name |
Input parameter | None. |
Incompliance remediation
If you set the Origin Info parameter of an origin domain name to OSS Domain, specify the origin domain name in the OSS domain name format. For more information, see Add a domain name.