[ { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627699, "created_time_dt": "2026-06-16T16:34:59Z", "desc": "Compliance test scenario: Service accepts TLS 1.3 encrypted traffic", "title": "Service accepts TLS 1.3 encrypted traffic", "types": [], "uid": "ccc-test-1023-1781627699" }, "message": "Service accepts TLS 1.3 encrypted traffic", "metadata": { "event_code": "Service accepts TLS 1.3 encrypted traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_3\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ \"{connection}\" state is open\n✓ \"{connection.State}\" is \"open\"\n✓ I close connection \"{connection}\"\n✓ \"{connection}\" state is closed", "status_id": 1, "time": 1781627699, "time_dt": "2026-06-16T16:34:59Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627699, "created_time_dt": "2026-06-16T16:34:59Z", "desc": "Compliance test scenario: Service rejects TLS 1.2 traffic", "title": "Service rejects TLS 1.2 traffic", "types": [], "uid": "ccc-test-1029-1781627699" }, "message": "Service rejects TLS 1.2 traffic", "metadata": { "event_code": "Service rejects TLS 1.2 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_2\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "time": 1781627699, "time_dt": "2026-06-16T16:34:59Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Service rejects TLS 1.1 traffic", "title": "Service rejects TLS 1.1 traffic", "types": [], "uid": "ccc-test-1035-1781627700" }, "message": "Service rejects TLS 1.1 traffic", "metadata": { "event_code": "Service rejects TLS 1.1 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_1\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Service rejects TLS 1.0 traffic", "title": "Service rejects TLS 1.0 traffic", "types": [], "uid": "ccc-test-1041-1781627700" }, "message": "Service rejects TLS 1.0 traffic", "metadata": { "event_code": "Service rejects TLS 1.0 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Verify SSL/TLS protocol support", "title": "Verify SSL/TLS protocol support", "types": [], "uid": "ccc-test-1046-1781627700" }, "message": "Verify SSL/TLS protocol support", "metadata": { "event_code": "Verify SSL/TLS protocol support", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"protocols\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_protocols_finoscccintegrationmain.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects which doesn't contain any of (skipped)\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Verify no known SSL/TLS vulnerabilities", "title": "Verify no known SSL/TLS vulnerabilities", "types": [], "uid": "ccc-test-1050-1781627700" }, "message": "Verify no known SSL/TLS vulnerabilities", "metadata": { "event_code": "Verify no known SSL/TLS vulnerabilities", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"vulnerable\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_vulnerable_finoscccintegrationmain.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Verify TLS 1.3 only certificate validity", "title": "Verify TLS 1.3 only certificate validity", "types": [], "uid": "ccc-test-1054-1781627700" }, "message": "Verify TLS 1.3 only certificate validity", "metadata": { "event_code": "Verify TLS 1.3 only certificate validity", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"server-defaults\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_server-defaults_finoscccintegrationmain.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: HTTP redirects to HTTPS", "title": "HTTP redirects to HTTPS", "types": [], "uid": "ccc-test-1166-1781627700" }, "message": "HTTP redirects to HTTPS", "metadata": { "event_code": "HTTP redirects to HTTPS", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@http", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a client connects to \"{host-name}\" with protocol \"http\" on port \"80\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ \"{connection}\" is not an error\n✓ I transmit \"GET / HTTP/1.1\\r\\nHost: {host-name}\\r\\n\\r\\n\" to \"{connection}\"\n✓ I attach \"{connection}\" to the test output as \"HTTP response\"\n✗ \"{connection.Output}\" contains \"301\" - Error: expected {connection.Output} to contain '301', but got 'HTTP/1.1 400 The account being accessed does not support http.\r\nContent-Length: 288\r\nContent-Type: application/xml\r\nServer: Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: d3a16cc2-501e-0009-4dae-fde848000000\r\nDate: Tue, 16 Jun 2026 16:35:00 GMT\r\n\r\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAccountRequiresHttps\u003c/Code\u003e\u003cMessage\u003eThe account being accessed does not support http.\nRequestId:d3a16cc2-501e-0009-4dae-fde848000000\nTime:2026-06-16T16:35:00.2004945Z\u003c/Message\u003e\u003cAccountName\u003efinoscccintegrationmain\u003c/AccountName\u003e\u003c/Error\u003e'\n⊘ I call \"{connection}\" with \"Close\" (skipped)\n⊘ \"{connection.State}\" is \"closed\" (skipped)", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Only secure protocols are exposed", "title": "Only secure protocols are exposed", "types": [], "uid": "ccc-test-1179-1781627700" }, "message": "Only secure protocols are exposed", "metadata": { "event_code": "Only secure protocols are exposed", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"protocols\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_protocols_finoscccintegrationmain.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Verify HTTPS uses IANA-assigned port 443", "title": "Verify HTTPS uses IANA-assigned port 443", "types": [], "uid": "ccc-test-1243-1781627700" }, "message": "Verify HTTPS uses IANA-assigned port 443", "metadata": { "event_code": "Verify HTTPS uses IANA-assigned port 443", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@http", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ \"{port-number}\" is \"443\"", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR07" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627700, "created_time_dt": "2026-06-16T16:35:00Z", "desc": "Compliance test scenario: Verify mTLS requires client certificate authentication", "title": "Verify mTLS requires client certificate authentication", "types": [], "uid": "ccc-test-1275-1781627700" }, "message": "Verify mTLS requires client certificate authentication", "metadata": { "event_code": "Verify mTLS requires client certificate authentication", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-red", "@tls", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on finoscccintegrationmain.blob.core.windows.net:443", "metadata": { "findings": [], "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "finoscccintegrationmain.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"server-defaults\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_server-defaults_finoscccintegrationmain.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1781627700, "time_dt": "2026-06-16T16:35:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR08" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627645, "created_time_dt": "2026-06-16T16:34:05Z", "desc": "Compliance test scenario: Verify objects are encrypted at rest", "title": "Verify objects are encrypted at rest", "types": [], "uid": "ccc-test-30-1781627645" }, "message": "Verify objects are encrypted at rest", "metadata": { "event_code": "Verify objects are encrypted at rest", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN02", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-encryption-check={timestamp}.txt\", and \"encryption test data\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"uploadResult\"\n✓ \"{uploadResult.Encryption}\" is not null\n✓ \"{uploadResult.EncryptionAlgorithm}\" is \"AES256\"\n✓ I attach \"{uploadResult}\" to the test output as \"Upload Result with Encryption Details\"", "status_id": 1, "time": 1781627645, "time_dt": "2026-06-16T16:34:05Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN02.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627645, "created_time_dt": "2026-06-16T16:34:05Z", "desc": "Compliance test scenario: Service prevents data modification by user with no access", "title": "Service prevents data modification by user with no access", "types": [], "uid": "ccc-test-71-1781627645" }, "message": "Service prevents data modification by user with no access", "metadata": { "event_code": "Service prevents data modification by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-cn05-unauthorized-modify={timestamp}.txt\", and \"unauthorized data\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-create-error.txt\"", "status_id": 1, "time": 1781627645, "time_dt": "2026-06-16T16:34:05Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627646, "created_time_dt": "2026-06-16T16:34:06Z", "desc": "Compliance test scenario: Service allows data modification by user with write access", "title": "Service allows data modification by user with write access", "types": [], "uid": "ccc-test-81-1781627646" }, "message": "Service allows data modification by user with write access", "metadata": { "event_code": "Service allows data modification by user with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-cn05-authorized-modify={timestamp}.txt\", and \"authorized data\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob test-cn05-authorized-modify=1781627646129.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-cn05-authorized-modify=1781627646129.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0dba3-501e-0009-20ad-fde848000000\nTime:2026-06-16T16:34:06.3636196Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"write-create-object-result.json\" (skipped)", "status_id": 1, "time": 1781627646, "time_dt": "2026-06-16T16:34:06Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627646, "created_time_dt": "2026-06-16T16:34:06Z", "desc": "Compliance test scenario: Service prevents administrative action (creating a new bucket) by user with no access", "title": "Service prevents administrative action (creating a new bucket) by user with no access", "types": [], "uid": "ccc-test-132-1781627646" }, "message": "Service prevents administrative action (creating a new bucket) by user with no access", "metadata": { "event_code": "Service prevents administrative action (creating a new bucket) by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-unauthorized-admin-container\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-admin-create-bucket-error.txt\"", "status_id": 1, "time": 1781627646, "time_dt": "2026-06-16T16:34:06Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627646, "created_time_dt": "2026-06-16T16:34:06Z", "desc": "Compliance test scenario: Service prevents administrative action (creating a new bucket) by user with read-only access", "title": "Service prevents administrative action (creating a new bucket) by user with read-only access", "types": [], "uid": "ccc-test-142-1781627646" }, "message": "Service prevents administrative action (creating a new bucket) by user with read-only access", "metadata": { "event_code": "Service prevents administrative action (creating a new bucket) by user with read-only access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-read-only-create-container\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"read-only-create-bucket-error.txt\"", "status_id": 1, "time": 1781627646, "time_dt": "2026-06-16T16:34:06Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627646, "created_time_dt": "2026-06-16T16:34:06Z", "desc": "Compliance test scenario: Service allows administrative action (creating a new bucket) by user with admin access", "title": "Service allows administrative action (creating a new bucket) by user with admin access", "types": [], "uid": "ccc-test-153-1781627646" }, "message": "Service allows administrative action (creating a new bucket) by user with admin access", "metadata": { "event_code": "Service allows administrative action (creating a new bucket) by user with admin access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-admin\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-authorized-admin-container\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to create container: failed to create container test-cn05-authorized-admin-container: PUT https://finoscccintegrationmain.blob.core.windows.net/test-cn05-authorized-admin-container\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation.\nERROR CODE: AuthorizationFailure\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationFailure\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation.\nRequestId:d3a0dd11-501e-0009-5fad-fde848000000\nTime:2026-06-16T16:34:06.8549106Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"admin-create-bucket-result.json\" (skipped)\n⊘ I call \"{storage}\" with \"DeleteBucket\" using argument \"test-cn05-authorized-admin-container\" (skipped)", "status_id": 1, "time": 1781627646, "time_dt": "2026-06-16T16:34:06Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627646, "created_time_dt": "2026-06-16T16:34:06Z", "desc": "Compliance test scenario: Child resource region compliance - NotTestable", "title": "Child resource region compliance - NotTestable", "types": [], "uid": "ccc-test-170-1781627646" }, "message": "Child resource region compliance - NotTestable", "metadata": { "event_code": "Child resource region compliance - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN06", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1781627646, "time_dt": "2026-06-16T16:34:06Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN06.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627646, "created_time_dt": "2026-06-16T16:34:06Z", "desc": "Compliance test scenario: Bucket data is replicated to physically separate locations", "title": "Bucket data is replicated to physically separate locations", "types": [], "uid": "ccc-test-205-1781627646" }, "message": "Bucket data is replicated to physically separate locations", "metadata": { "event_code": "Bucket data is replicated to physically separate locations", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN08", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetReplicationStatus\" using argument \"{resource-name}\"\n✓ I refer to \"{result}\" as \"replicationStatus\"\n✓ I refer to \"{replicationStatus.Locations}\" as \"locations\"\n✓ I attach \"{replicationStatus}\" to the test output as \"Replication Status\"\n✗ \"{locations}\" is an array of objects with length \"2\" - Error: expected length 2, got 1\n⊘ \"{permitted-regions}\" is an array of objects with at least the following contents (skipped)\n⊘ \"{permitted-regions}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1781627646, "time_dt": "2026-06-16T16:34:06Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN08.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627646, "created_time_dt": "2026-06-16T16:34:06Z", "desc": "Compliance test scenario: Replication status can be retrieved for monitoring", "title": "Replication status can be retrieved for monitoring", "types": [], "uid": "ccc-test-235-1781627646" }, "message": "Replication status can be retrieved for monitoring", "metadata": { "event_code": "Replication status can be retrieved for monitoring", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN08", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetReplicationStatus\" using argument \"{resource-name}\"\n✓ I refer to \"{result}\" as \"replicationStatus\"\n✓ I attach \"{replicationStatus}\" to the test output as \"Replication Status\"\n✓ I refer to \"{replicationStatus.Locations}\" as \"locations\"\n✗ \"{locations}\" is an array of objects with at least the following contents - Error: expected row not found: map[value:{replication-locations[0]}]", "status_id": 1, "time": 1781627646, "time_dt": "2026-06-16T16:34:06Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN08.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627647, "created_time_dt": "2026-06-16T16:34:07Z", "desc": "Compliance test scenario: Service prevents reading bucket with no access", "title": "Service prevents reading bucket with no access", "types": [], "uid": "ccc-test-272-1781627647" }, "message": "Service prevents reading bucket with no access", "metadata": { "event_code": "Service prevents reading bucket with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ListObjects\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-list-error.txt\"", "status_id": 1, "time": 1781627647, "time_dt": "2026-06-16T16:34:07Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627647, "created_time_dt": "2026-06-16T16:34:07Z", "desc": "Compliance test scenario: Service allows reading bucket with read access", "title": "Service allows reading bucket with read access", "types": [], "uid": "ccc-test-283-1781627647" }, "message": "Service allows reading bucket with read access", "metadata": { "event_code": "Service allows reading bucket with read access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ListObjects\" using argument \"{resource-name}\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to list blobs: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0de35-501e-0009-5aad-fde848000000\nTime:2026-06-16T16:34:07.2170317Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"read-list-objects-result.json\" (skipped)", "status_id": 1, "time": 1781627647, "time_dt": "2026-06-16T16:34:07Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627647, "created_time_dt": "2026-06-16T16:34:07Z", "desc": "Compliance test scenario: Service prevents reading object with no access", "title": "Service prevents reading object with no access", "types": [], "uid": "ccc-test-324-1781627647" }, "message": "Service prevents reading object with no access", "metadata": { "event_code": "Service prevents reading object with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-read-object-error.txt\"", "status_id": 1, "time": 1781627647, "time_dt": "2026-06-16T16:34:07Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627647, "created_time_dt": "2026-06-16T16:34:07Z", "desc": "Compliance test scenario: Service allows reading object with read access", "title": "Service allows reading object with read access", "types": [], "uid": "ccc-test-337-1781627647" }, "message": "Service allows reading object with read access", "metadata": { "event_code": "Service allows reading object with read access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to download blob test-object=1781627647713.txt: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-object=1781627647713.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0e0a7-501e-0009-73ad-fde848000000\nTime:2026-06-16T16:34:08.1652485Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"read-read-object-result.json\" (skipped)", "status_id": 1, "time": 1781627647, "time_dt": "2026-06-16T16:34:07Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627648, "created_time_dt": "2026-06-16T16:34:08Z", "desc": "Compliance test scenario: Service prevents creating bucket with no access", "title": "Service prevents creating bucket with no access", "types": [], "uid": "ccc-test-377-1781627648" }, "message": "Service prevents creating bucket with no access", "metadata": { "event_code": "Service prevents creating bucket with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-bucket-no-access\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-create-bucket-error.txt\"", "status_id": 1, "time": 1781627648, "time_dt": "2026-06-16T16:34:08Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627648, "created_time_dt": "2026-06-16T16:34:08Z", "desc": "Compliance test scenario: Service allows creating bucket with write access", "title": "Service allows creating bucket with write access", "types": [], "uid": "ccc-test-389-1781627648" }, "message": "Service allows creating bucket with write access", "metadata": { "event_code": "Service allows creating bucket with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-bucket-write\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to create container: failed to create container test-bucket-write: PUT https://finoscccintegrationmain.blob.core.windows.net/test-bucket-write\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation.\nERROR CODE: AuthorizationFailure\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationFailure\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation.\nRequestId:d3a0e0e5-501e-0009-29ad-fde848000000\nTime:2026-06-16T16:34:08.2729515Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"write-create-bucket-result.json\" (skipped)\n⊘ I call \"{storage}\" with \"DeleteBucket\" using argument \"{result.ID}\" (skipped)", "status_id": 1, "time": 1781627648, "time_dt": "2026-06-16T16:34:08Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627648, "created_time_dt": "2026-06-16T16:34:08Z", "desc": "Compliance test scenario: Service prevents writing object with read-only access", "title": "Service prevents writing object with read-only access", "types": [], "uid": "ccc-test-430-1781627648" }, "message": "Service prevents writing object with read-only access", "metadata": { "event_code": "Service prevents writing object with read-only access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-write-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"read-create-object-error.txt\"", "status_id": 1, "time": 1781627648, "time_dt": "2026-06-16T16:34:08Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627648, "created_time_dt": "2026-06-16T16:34:08Z", "desc": "Compliance test scenario: Service allows writing object with write access", "title": "Service allows writing object with write access", "types": [], "uid": "ccc-test-442-1781627648" }, "message": "Service allows writing object with write access", "metadata": { "event_code": "Service allows writing object with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-write-object={timestamp}.txt\", and \"test content\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob test-write-object=1781627648354.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-write-object=1781627648354.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0e11c-501e-0009-58ad-fde848000000\nTime:2026-06-16T16:34:08.3836395Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"write-create-object-result.json\" (skipped)", "status_id": 1, "time": 1781627648, "time_dt": "2026-06-16T16:34:08Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627648, "created_time_dt": "2026-06-16T16:34:08Z", "desc": "Compliance test scenario: Service enforces uniform bucket-level access by rejecting object-level permissions", "title": "Service enforces uniform bucket-level access by rejecting object-level permissions", "types": [], "uid": "ccc-test-482-1781627648" }, "message": "Service enforces uniform bucket-level access by rejecting object-level permissions", "metadata": { "event_code": "Service enforces uniform bucket-level access by rejecting object-level permissions", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN02", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to download blob test-object=1781627648409.txt: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-object=1781627648409.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0e25e-501e-0009-75ad-fde848000000\nTime:2026-06-16T16:34:08.8568180Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I call \"{storage}\" with \"SetObjectPermission\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"none\" (skipped)\n⊘ \"{result}\" is an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"set-object-permission-error.txt\" (skipped)\n⊘ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\" (skipped)\n⊘ \"{result}\" is not an error (skipped)", "status_id": 1, "time": 1781627648, "time_dt": "2026-06-16T16:34:08Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN02.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627648, "created_time_dt": "2026-06-16T16:34:08Z", "desc": "Compliance test scenario: Service enforces uniform bucket-level access denial", "title": "Service enforces uniform bucket-level access denial", "types": [], "uid": "ccc-test-522-1781627648" }, "message": "Service enforces uniform bucket-level access denial", "metadata": { "event_code": "Service enforces uniform bucket-level access denial", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN02", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I call \"{storage}\" with \"SetObjectPermission\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"read\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"set-object-permission-error.txt\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error", "status_id": 1, "time": 1781627648, "time_dt": "2026-06-16T16:34:08Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN02.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627649, "created_time_dt": "2026-06-16T16:34:09Z", "desc": "Compliance test scenario: Service supports bucket soft delete and recovery", "title": "Service supports bucket soft delete and recovery", "types": [], "uid": "ccc-test-572-1781627649" }, "message": "Service supports bucket soft delete and recovery", "metadata": { "event_code": "Service supports bucket soft delete and recovery", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN03", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateBucket\" using argument \"ccc-test-soft-delete\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"testBucket\"\n✓ I attach \"{result}\" to the test output as \"created-bucket.json\"\n✓ I call \"{storage}\" with \"DeleteBucket\" using argument \"ccc-test-soft-delete\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"ListDeletedBuckets\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"deleted-buckets.json\"\n✗ \"{result}\" is an array of objects with length \"1\" - Error: expected length 1, got 0\n⊘ I call \"{storage}\" with \"RestoreBucket\" using argument \"ccc-test-soft-delete\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ I call \"{storage}\" with \"ListBuckets\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"restored-buckets.json\" (skipped)\n⊘ I call \"{storage}\" with \"DeleteBucket\" using argument \"ccc-test-soft-delete\" (skipped)\n⊘ \"{result}\" is not an error (skipped)", "status_id": 1, "time": 1781627649, "time_dt": "2026-06-16T16:34:09Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN03.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627650, "created_time_dt": "2026-06-16T16:34:10Z", "desc": "Compliance test scenario: Service prevents modification of locked retention policy", "title": "Service prevents modification of locked retention policy", "types": [], "uid": "ccc-test-610-1781627650" }, "message": "Service prevents modification of locked retention policy", "metadata": { "event_code": "Service prevents modification of locked retention policy", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN03", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetBucketRetentionDurationDays\" using argument \"{resource-name}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"originalRetention\"\n✓ I attach \"{result}\" to the test output as \"original-retention-days.txt\"\n✓ \"{result}\" should be greater than \"0\"\n✓ I call \"{storage}\" with \"SetBucketRetentionDurationDays\" using arguments \"{resource-name}\" and \"1\"\n✗ \"{result}\" is an error - Error: expected {result} to be an error, got \u003cnil\u003e\n⊘ I attach \"{result}\" to the test output as \"set-retention-error.txt\" (skipped)\n⊘ I call \"{storage}\" with \"GetBucketRetentionDurationDays\" using argument \"{resource-name}\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ \"{result}\" should be greater than \"0\" (skipped)", "status_id": 1, "time": 1781627650, "time_dt": "2026-06-16T16:34:10Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN03.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627651, "created_time_dt": "2026-06-16T16:34:11Z", "desc": "Compliance test scenario: Service applies default retention policy to newly uploaded object", "title": "Service applies default retention policy to newly uploaded object", "types": [], "uid": "ccc-test-655-1781627651" }, "message": "Service applies default retention policy to newly uploaded object", "metadata": { "event_code": "Service applies default retention policy to newly uploaded object", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-retention-object={timestamp}.txt\", and \"protected data\"\n✓ I attach \"{result}\" to the test output as \"uploaded-object.json\"\n✓ I call \"{userStorage}\" with \"GetObjectRetentionDurationDays\" using arguments \"{resource-name}\" and \"test-retention-object={timestamp}.txt\"\n✗ \"{result}\" should be greater than \"1\" - Error: cannot parse {result} as number: strconv.ParseFloat: parsing \"failed to get blob properties: HEAD https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-retention-object=1781627651796.txt\\n--------------------------------------------------------------------------------\\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\\nERROR CODE: AuthorizationPermissionMismatch\\n--------------------------------------------------------------------------------\\nResponse contained no body\\n--------------------------------------------------------------------------------\\n\": invalid syntax", "status_id": 1, "time": 1781627651, "time_dt": "2026-06-16T16:34:11Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627651, "created_time_dt": "2026-06-16T16:34:11Z", "desc": "Compliance test scenario: Service enforces retention policy on newly created objects", "title": "Service enforces retention policy on newly created objects", "types": [], "uid": "ccc-test-664-1781627651" }, "message": "Service enforces retention policy on newly created objects", "metadata": { "event_code": "Service enforces retention policy on newly created objects", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"immediate-delete-test={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"immediate-delete-test={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"immediate-delete-error.txt\"", "status_id": 1, "time": 1781627651, "time_dt": "2026-06-16T16:34:11Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627652, "created_time_dt": "2026-06-16T16:34:12Z", "desc": "Compliance test scenario: Service validates retention period meets minimum requirements", "title": "Service validates retention period meets minimum requirements", "types": [], "uid": "ccc-test-672-1781627652" }, "message": "Service validates retention period meets minimum requirements", "metadata": { "event_code": "Service validates retention period meets minimum requirements", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"retention-period-test={timestamp}.txt\", and \"compliance data\"\n✓ I call \"{storage}\" with \"GetObjectRetentionDurationDays\" using arguments \"{resource-name}\" and \"retention-period-test={timestamp}.txt\"\n✓ \"{result}\" should be greater than \"1\"\n✓ I attach \"{result}\" to the test output as \"retention-period-days.json\"", "status_id": 1, "time": 1781627652, "time_dt": "2026-06-16T16:34:12Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627654, "created_time_dt": "2026-06-16T16:34:14Z", "desc": "Compliance test scenario: Service prevents object deletion by write user during retention period", "title": "Service prevents object deletion by write user during retention period", "types": [], "uid": "ccc-test-741-1781627654" }, "message": "Service prevents object deletion by write user during retention period", "metadata": { "event_code": "Service prevents object deletion by write user during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"protected-object={timestamp}.txt\", and \"immutable data\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob protected-object=1781627654006.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/protected-object=1781627654006.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0efea-501e-0009-1dad-fde848000000\nTime:2026-06-16T16:34:14.0330667Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"protected-object.json\" (skipped)\n⊘ I call \"{userStorage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"protected-object={timestamp}.txt\" (skipped)\n⊘ \"{result}\" is an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"delete-protected-error.txt\" (skipped)\n? \"{result}\" should contain one of \"retention, locked, immutable, protected\" (undefined)", "status_id": 1, "time": 1781627654, "time_dt": "2026-06-16T16:34:14Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627654, "created_time_dt": "2026-06-16T16:34:14Z", "desc": "Compliance test scenario: Service prevents object deletion by admin user during retention period", "title": "Service prevents object deletion by admin user during retention period", "types": [], "uid": "ccc-test-750-1781627654" }, "message": "Service prevents object deletion by admin user during retention period", "metadata": { "event_code": "Service prevents object deletion by admin user during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"admin-protected-object={timestamp}.txt\", and \"compliance data\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"admin-protected-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"admin-delete-protected-error.txt\"", "status_id": 1, "time": 1781627654, "time_dt": "2026-06-16T16:34:14Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627654, "created_time_dt": "2026-06-16T16:34:14Z", "desc": "Compliance test scenario: Service prevents object modification during retention period", "title": "Service prevents object modification during retention period", "types": [], "uid": "ccc-test-764-1781627654" }, "message": "Service prevents object modification during retention period", "metadata": { "event_code": "Service prevents object modification during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"modify-test-object={timestamp}.txt\", and \"original content\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob modify-test-object=1781627654905.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/modify-test-object=1781627654905.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0f27d-501e-0009-40ad-fde848000000\nTime:2026-06-16T16:34:14.9331924Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"original-object.json\" (skipped)\n⊘ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"modify-test-object={timestamp}.txt\", and \"modified content\" (skipped)\n⊘ \"{result}\" is an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"modify-protected-error.txt\" (skipped)\n? \"{result}\" should contain one of \"retention, locked, immutable, protected, exists\" (undefined)", "status_id": 1, "time": 1781627654, "time_dt": "2026-06-16T16:34:14Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627654, "created_time_dt": "2026-06-16T16:34:14Z", "desc": "Compliance test scenario: Service allows object read access during retention period", "title": "Service allows object read access during retention period", "types": [], "uid": "ccc-test-778-1781627654" }, "message": "Service allows object read access during retention period", "metadata": { "event_code": "Service allows object read access during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"readable-protected-object={timestamp}.txt\", and \"readable data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"readable-protected-object={timestamp}.txt\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to download blob readable-protected-object=1781627654959.txt: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/readable-protected-object=1781627654959.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:d3a0f3ef-501e-0009-05ad-fde848000000\nTime:2026-06-16T16:34:15.4164090Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I refer to \"{result}\" as \"readResult\" (skipped)\n⊘ I attach \"{result}\" to the test output as \"read-protected-object.json\" (skipped)\n⊘ \"{readResult.Name}\" is \"readable-protected-object={timestamp}.txt\" (skipped)", "status_id": 1, "time": 1781627654, "time_dt": "2026-06-16T16:34:14Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627655, "created_time_dt": "2026-06-16T16:34:15Z", "desc": "Compliance test scenario: Service enables versioning and objects receive unique version identifiers", "title": "Service enables versioning and objects receive unique version identifiers", "types": [], "uid": "ccc-test-808-1781627655" }, "message": "Service enables versioning and objects receive unique version identifiers", "metadata": { "event_code": "Service enables versioning and objects receive unique version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"IsBucketVersioningEnabled\" using argument \"{resource-name}\"\n✓ \"{result}\" is true\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"versioned-object.txt\", and \"test content\"\n✓ I refer to \"{result}\" as \"createdObject\"\n? \"{createdObject.VersionID}\" is not empty (undefined)\n⊘ I attach \"{result}\" to the test output as \"versioned-object.json\" (skipped)", "status_id": 1, "time": 1781627655, "time_dt": "2026-06-16T16:34:15Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627656, "created_time_dt": "2026-06-16T16:34:16Z", "desc": "Compliance test scenario: Modified objects receive new version identifiers", "title": "Modified objects receive new version identifiers", "types": [], "uid": "ccc-test-836-1781627656" }, "message": "Modified objects receive new version identifiers", "metadata": { "event_code": "Modified objects receive new version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"original content\"\n✓ I refer to \"{result.VersionID}\" as \"version1\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"modified content\"\n✓ I refer to \"{result.VersionID}\" as \"version2\"\n? \"{version1}\" is not equal to \"{version2}\" (undefined)", "status_id": 1, "time": 1781627656, "time_dt": "2026-06-16T16:34:16Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627657, "created_time_dt": "2026-06-16T16:34:17Z", "desc": "Compliance test scenario: Modified objects receive new version identifiers", "title": "Modified objects receive new version identifiers", "types": [], "uid": "ccc-test-874-1781627657" }, "message": "Modified objects receive new version identifiers", "metadata": { "event_code": "Modified objects receive new version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"original content\"\n✓ I refer to \"{result.VersionID}\" as \"version1\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"modified content\"\n✓ I refer to \"{result.VersionID}\" as \"version2\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"{version1}\"\n✓ I attach \"{result}\" to the test output as \"original-content.json\"\n✓ \"{result.Data}\" contains \"original content\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"{version2}\"\n✗ \"{result.Data}\" contains \"modified content\" - Error: expected {result.Data} to contain 'modified content', but got '[original content]'\n⊘ I attach \"{result}\" to the test output as \"modified-content.json\" (skipped)", "status_id": 1, "time": 1781627657, "time_dt": "2026-06-16T16:34:17Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627659, "created_time_dt": "2026-06-16T16:34:19Z", "desc": "Compliance test scenario: Deleted object data can be reloaded from previous version", "title": "Deleted object data can be reloaded from previous version", "types": [], "uid": "ccc-test-914-1781627659" }, "message": "Deleted object data can be reloaded from previous version", "metadata": { "event_code": "Deleted object data can be reloaded from previous version", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"recover-deleted-object={timestamp}.txt\", and \"data to retain\"\n✓ I refer to \"{result.VersionID}\" as \"retainedVersionId\"\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"recover-deleted-object={timestamp}.txt\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"recover-deleted-object={timestamp}.txt\", and \"{retainedVersionId}\"\n✓ \"{result.Data}\" contains \"data to retain\"\n✓ I attach \"{result}\" to the test output as \"recovered-deleted-version.json\"", "status_id": 1, "time": 1781627659, "time_dt": "2026-06-16T16:34:19Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627660, "created_time_dt": "2026-06-16T16:34:20Z", "desc": "Compliance test scenario: Deleted object version remains in version list", "title": "Deleted object version remains in version list", "types": [], "uid": "ccc-test-924-1781627660" }, "message": "Deleted object version remains in version list", "metadata": { "event_code": "Deleted object version remains in version list", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"list-deleted-versions-object={timestamp}.txt\", and \"versioned data\"\n✓ I refer to \"{result.VersionID}\" as \"listedVersionId\"\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"list-deleted-versions-object={timestamp}.txt\"\n✓ I call \"{storage}\" with \"ListObjectVersions\" using arguments \"{resource-name}\" and \"list-deleted-versions-object={timestamp}.txt\"\n✗ \"{result}\" is an array of objects with at least the following contents - Error: expected row not found: map[ObjectID:list-deleted-versions-object={timestamp}.txt VersionID:{listedVersionId}]\n⊘ I attach \"{result}\" to the test output as \"versions-after-delete.json\" (skipped)", "status_id": 1, "time": 1781627660, "time_dt": "2026-06-16T16:34:20Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627662, "created_time_dt": "2026-06-16T16:34:22Z", "desc": "Compliance test scenario: MFA requirement for destructive operations cannot be tested automatically - NotTestable", "title": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-1294-1781627662" }, "message": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "metadata": { "event_code": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN03", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@load-balancer", "@virtual-machines", "@serverless-computing", "@NotTestable" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1781627662, "time_dt": "2026-06-16T16:34:22Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN03.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627662, "created_time_dt": "2026-06-16T16:34:22Z", "desc": "Compliance test scenario: Verify admin actions are logged with identity and timestamp", "title": "Verify admin actions are logged with identity and timestamp", "types": [], "uid": "ccc-test-1337-1781627662" }, "message": "Verify admin actions are logged with identity and timestamp", "metadata": { "event_code": "Verify admin actions are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"UpdateResourcePolicy\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"Policy Update Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"admin\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"adminLogs\"\n✓ I attach \"{adminLogs}\" to the test output as \"Admin Activity Logs\"\n✗ \"{adminLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "time": 1781627662, "time_dt": "2026-06-16T16:34:22Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627674, "created_time_dt": "2026-06-16T16:34:34Z", "desc": "Compliance test scenario: Verify data modifications are logged with identity and timestamp", "title": "Verify data modifications are logged with identity and timestamp", "types": [], "uid": "ccc-test-1375-1781627674" }, "message": "Verify data modifications are logged with identity and timestamp", "metadata": { "event_code": "Verify data modifications are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataWrite\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Write Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-write\", and \"{20}\"\n✓ I refer to \"{result}\" as \"dataLogs\"\n✓ I attach \"{dataLogs}\" to the test output as \"Data Write Logs\"\n✗ \"{dataLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "time": 1781627674, "time_dt": "2026-06-16T16:34:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627688, "created_time_dt": "2026-06-16T16:34:48Z", "desc": "Compliance test scenario: Verify data read operations are logged with identity and timestamp", "title": "Verify data read operations are logged with identity and timestamp", "types": [], "uid": "ccc-test-1414-1781627688" }, "message": "Verify data read operations are logged with identity and timestamp", "metadata": { "event_code": "Verify data read operations are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Read Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-read\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"readLogs\"\n✓ I attach \"{readLogs}\" to the test output as \"Data Read Logs\"\n✗ \"{readLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "time": 1781627688, "time_dt": "2026-06-16T16:34:48Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627699, "created_time_dt": "2026-06-16T16:34:59Z", "desc": "Compliance test scenario: Service prevents data read by user with no access", "title": "Service prevents data read by user with no access", "types": [], "uid": "ccc-test-1442-1781627699" }, "message": "Service prevents data read by user with no access", "metadata": { "event_code": "Service prevents data read by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"{service-type}\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userReadableService\"\n✓ I call \"{userReadableService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-trigger-data-read-error.txt\"", "status_id": 1, "time": 1781627699, "time_dt": "2026-06-16T16:34:59Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR06" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627699, "created_time_dt": "2026-06-16T16:34:59Z", "desc": "Compliance test scenario: Enumeration event publishing cannot be tested automatically - NotTestable", "title": "Enumeration event publishing cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-1459-1781627699" }, "message": "Enumeration event publishing cannot be tested automatically - NotTestable", "metadata": { "event_code": "Enumeration event publishing cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1781627699, "time_dt": "2026-06-16T16:34:59Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627699, "created_time_dt": "2026-06-16T16:34:59Z", "desc": "Compliance test scenario: Enumeration logging cannot be verified automatically - NotTestable", "title": "Enumeration logging cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-1478-1781627699" }, "message": "Enumeration logging cannot be verified automatically - NotTestable", "metadata": { "event_code": "Enumeration logging cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1781627699, "time_dt": "2026-06-16T16:34:59Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1781627699, "created_time_dt": "2026-06-16T16:34:59Z", "desc": "Compliance test scenario: Replication destination trust cannot be verified automatically - NotTestable", "title": "Replication destination trust cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-1496-1781627699" }, "message": "Replication destination trust cannot be verified automatically - NotTestable", "metadata": { "event_code": "Replication destination trust cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN10", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1781627699, "time_dt": "2026-06-16T16:34:59Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN10.AR01" ] } } } ]