Plugin Title File Storage Policy Protection
Category File Storage
Description Ensure Policy statements have deletion protection for File Storage Services unless it is an administrator group.
More Info Adding deletion protection to Oracle File Storage policies mitigates unintended deletion of File Storage Services by unauthorized users or groups.
AWS Link
Recommended Action When writing policies, avoid blanket statements, and add a where statement with the line request.permission != {FILE_SYSTEM_DELETE, MOUNT_TARGET_DELETE, EXPORT_SET_DELETE} .

Detailed Remediation Steps

Want to scan for this risk automatically?

Get Started Now