Sensitive values may be placed in object keys, user-defined metadata, or tags. These values are returned by bucket listing operations and recorded in access logs and request URLs, which are governed by weaker access controls than the object content. This results in a loss of confidentiality without any object being read.
Object Keys and Listing Metadata Expose Sensitive Information
CCC.ObjStor.TH11
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CP02 | Storage Objects | The service always stores each data element as an object that contains both the data and its metadata, addressed by a unique key within a bucket. |
| CCC.Core.CP03 | Access Log Publication | The service automatically publishes structured, verbose records of activities performed within the scope of the service by external actors. |
| CCC.Core.CP20 | Resource Tagging | The service provides users with the ability to tag a child resource with metadata that can be reviewed or queried. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CN15 | Restrict Bucket Listing to Explicitly Authorized Identities | Ensure that the set of object keys and listing metadata in a bucket is disclosed only to identities explicitly granted list permission, since keys and metadata may themselves carry sensitive information. |