Evaluates whether real-time logging is enabled for Object Storage Service (OSS) buckets.
Risk level
Default risk level: Medium.
You can change the risk level as needed.
Detection logic
-
An OSS bucket is considered compliant if real-time logging is enabled.
Rule details
|
Parameter |
Description |
|
Rule name |
Enable real-time logging for Object Storage Service |
|
Rule identifier |
|
|
Tags |
OSS,Bucket |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Periodic |
|
Trigger frequency |
24 hours |
|
Supported resource types |
ACS::OSS::Bucket |
|
Input parameters |
None |
Remediation
To remediate non-compliant resources, see Real-time log query.