OCI-015 Oracle Cloud Infrastructure (OCI)

Versioning is enabled on sensitive buckets.

Versioning is enabled on sensitive buckets.

Domain
Oracle Cloud Infrastructure (OCI)
Area
Object Storage
Automated / manual
Automated

Risk if it fails

Deletion/overwrite is unrecoverable.

Ransomware overwrites or deletes files. Versioning keeps previous copies so a malicious change does not become permanent data loss.

How Tess tests it

1 test — each concludes only on cited evidence.

Versioning is enabled on sensitive buckets.

Automated
Procedure
Confirm versioning is Enabled.

Read-only command 

oci os bucket get --bucket-name <bucket> --query 'data.{name:name,versioning:versioning}'

More in Oracle Cloud Infrastructure (OCI)

OCI-001 MFA is enforced for all IAM users, especially administrators. OCI-002 Customer secret keys / API keys are rotated regularly (<=90 days). OCI-003 A strong password policy is configured. OCI-004 Membership of the Administrators group is minimal.

Want Tess to test OCI-015 against your evidence?

Book a demo