Evaluates Object Storage Service (OSS) buckets as Non-compliant if no custom domain name is associated.
Scenarios
A custom domain name bound to an OSS bucket prevents domain hijacking and unauthorized access to bucket resources.
Risk level
Default risk level: medium.
You can change the risk level when you apply this rule.
Compliance evaluation logic
An OSS bucket without an associated custom domain name is evaluated as Non-compliant.
Rule details
|
Parameter |
Description |
|
Rule template name |
oss-bucket-cname-check |
|
Rule template identifier |
|
|
Automatic remediation |
Not supported |
|
Trigger type |
Configuration Change |
|
Supported resource type |
ACS::OSS::Bucket |
|
Input parameter |
None |
Non-compliance remediation
For more information, see Access OSS through a custom domain name.