The service always provides buckets as uniquely identifiable containers in which objects are stored and to which access policies and configuration are applied.
Storage Buckets
CCC.ObjStor.CP01
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.TH10 | Deleted Bucket Names are Reclaimed by Other Tenants | Bucket names are unique across all tenants of the provider (on Azure this applies to the storage account name rather than the container), so when a bucket is deleted its name may be registered by any other tenant. Configuration, code, replication rules, or links that still reference the name then resolve to a bucket under another tenant's control, and data is written to or read from it. This results in a loss of confidentiality, integrity, and availability of the data routed through the reclaimed name. |