An immutability lock may be applied in a mode that privileged identities can shorten or remove, with a retention period shorter than the record requires, or not applied to objects that require it. Objects intended to be write-once can then be overwritten or deleted. This results in a loss of integrity and availability of records that depend on the lock.
Object Immutability is Bypassed or Expires Prematurely
CCC.ObjStor.TH08
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CP06 | Replace Stored Objects | The service always allows a user to replace an object in a bucket by writing a new object to the same key, overwriting the previous content unless versioning retains it. |
| CCC.ObjStor.CP07 | Delete Stored Objects | The service always allows a user to delete an object from a bucket given the object key. |
| CCC.ObjStor.CP17 | Object Immutability | The service may be configured to lock an object or a bucket so that its objects cannot be overwritten or deleted until a retention period expires, and the lock itself may be made irrevocable. |
| CCC.Core.CP32 | Deletion Protection | The service may be configured to block the deletion of a child resource, or to retain a deleted child resource for a recovery window during which it can be restored. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CN03 | Prevent Bucket Deletion Through Irrevocable Bucket Retention Policy | Ensure that object storage bucket is not deleted after creation, and that the preventative measure cannot be unset. |
| CCC.ObjStor.CN04 | Apply a Default Retention Policy to All Objects | Ensure that all objects stored in the object storage system have a retention policy applied by default, preventing premature deletion or modification of objects. |