The service always allows a user to replace an object in a bucket by writing a new object to the same key, overwriting the previous content unless versioning retains it.
Replace Stored Objects
CCC.ObjStor.CP06
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.TH04 | Objects are Encrypted with Keys Outside Organizational Control | An identity with write access may store or re-encrypt objects using a customer-provided key that the service does not retain, or a key held in a key management service outside the organization's control. The service then holds ciphertext it cannot decrypt on the organization's behalf, so the plaintext is available only to the holder of the foreign key. This results in a loss of availability of the affected data and, where the key holder is external, a loss of confidentiality. |
| CCC.ObjStor.TH05 | Deleted or Overwritten Object Versions Remain Readable | When versioning is enabled, deleting an object records a delete marker and replacing an object creates a new version, while every prior version remains stored. Data that users consider removed is still retrievable by any identity permitted to read object versions, and continues to incur storage cost. This results in a loss of confidentiality for data that was expected to be purged. |
| CCC.ObjStor.TH08 | Object Immutability is Bypassed or Expires Prematurely | An immutability lock may be applied in a mode that privileged identities can shorten or remove, with a retention period shorter than the record requires, or not applied to objects that require it. Objects intended to be write-once can then be overwritten or deleted. This results in a loss of integrity and availability of records that depend on the lock. |