Write access may be granted to external systems or through signed URLs without constraints on object content, type, or size. Objects of arbitrary content are stored and later consumed by downstream processes. This results in a loss of integrity for systems that trust the bucket's contents.
Untrusted Content is Written to Buckets
CCC.ObjStor.TH12
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CP05 | Store New Objects | The service always allows a user to store a new object in a bucket under a key that is not yet in use. |
| CCC.Core.CP05 | Signed URLs | The service can generate an ad hoc URL containing authentication information to enforce user-configured permissions for accessing a specific component or a child resource. |
| CCC.Core.CP30 | Passive Ingestion | While running, the service can pause, idle or wait to receive inputs, commands, or data from some other service or external source for the service to process or operate on. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CN08 | Enforce Constraints on Pre-Signed URL Generation | Ensure that pre-signed URLs are generated with minimum necessary permissions, limited expiry durations, and auditable generation events to prevent unauthorized access through leaked or overly permissive URLs. |