[ { "message": "Verify objects are encrypted at rest", "metadata": { "event_code": "Verify objects are encrypted at rest", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN02", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-encryption-check={timestamp}.txt\", and \"encryption test data\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"uploadResult\"\n✓ \"{uploadResult.Encryption}\" is not null\n✓ \"{uploadResult.EncryptionAlgorithm}\" is \"AES256\"\n✓ I attach \"{uploadResult}\" to the test output as \"Upload Result with Encryption Details\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN02.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625052, "created_time_dt": "2026-06-16T15:50:52Z", "desc": "Compliance test scenario: Verify objects are encrypted at rest", "title": "Verify objects are encrypted at rest", "types": [], "uid": "ccc-test-30-1781625052" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625052, "time_dt": "2026-06-16T15:50:52Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents data modification by user with no access", "metadata": { "event_code": "Service prevents data modification by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-cn05-unauthorized-modify={timestamp}.txt\", and \"unauthorized data\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-create-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625053, "created_time_dt": "2026-06-16T15:50:53Z", "desc": "Compliance test scenario: Service prevents data modification by user with no access", "title": "Service prevents data modification by user with no access", "types": [], "uid": "ccc-test-71-1781625053" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625053, "time_dt": "2026-06-16T15:50:53Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service allows data modification by user with write access", "metadata": { "event_code": "Service allows data modification by user with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-cn05-authorized-modify={timestamp}.txt\", and \"authorized data\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob test-cn05-authorized-modify=1781625054048.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-cn05-authorized-modify=1781625054048.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e63e3-601e-0070-27a7-fd146c000000\nTime:2026-06-16T15:50:54.4618283Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"write-create-object-result.json\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625054, "created_time_dt": "2026-06-16T15:50:54Z", "desc": "Compliance test scenario: Service allows data modification by user with write access", "title": "Service allows data modification by user with write access", "types": [], "uid": "ccc-test-81-1781625054" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625054, "time_dt": "2026-06-16T15:50:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents administrative action (creating a new bucket) by user with no access", "metadata": { "event_code": "Service prevents administrative action (creating a new bucket) by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-unauthorized-admin-container\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-admin-create-bucket-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625054, "created_time_dt": "2026-06-16T15:50:54Z", "desc": "Compliance test scenario: Service prevents administrative action (creating a new bucket) by user with no access", "title": "Service prevents administrative action (creating a new bucket) by user with no access", "types": [], "uid": "ccc-test-132-1781625054" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625054, "time_dt": "2026-06-16T15:50:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents administrative action (creating a new bucket) by user with read-only access", "metadata": { "event_code": "Service prevents administrative action (creating a new bucket) by user with read-only access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-read-only-create-container\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"read-only-create-bucket-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625054, "created_time_dt": "2026-06-16T15:50:54Z", "desc": "Compliance test scenario: Service prevents administrative action (creating a new bucket) by user with read-only access", "title": "Service prevents administrative action (creating a new bucket) by user with read-only access", "types": [], "uid": "ccc-test-142-1781625054" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625054, "time_dt": "2026-06-16T15:50:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service allows administrative action (creating a new bucket) by user with admin access", "metadata": { "event_code": "Service allows administrative action (creating a new bucket) by user with admin access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-admin\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-authorized-admin-container\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to create container: failed to create container test-cn05-authorized-admin-container: PUT https://finoscccintegrationmain.blob.core.windows.net/test-cn05-authorized-admin-container\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation.\nERROR CODE: AuthorizationFailure\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationFailure\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation.\nRequestId:ff4e6638-601e-0070-17a7-fd146c000000\nTime:2026-06-16T15:50:55.3823605Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"admin-create-bucket-result.json\" (skipped)\n⊘ I call \"{storage}\" with \"DeleteBucket\" using argument \"test-cn05-authorized-admin-container\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625054, "created_time_dt": "2026-06-16T15:50:54Z", "desc": "Compliance test scenario: Service allows administrative action (creating a new bucket) by user with admin access", "title": "Service allows administrative action (creating a new bucket) by user with admin access", "types": [], "uid": "ccc-test-153-1781625054" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625054, "time_dt": "2026-06-16T15:50:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Child resource region compliance - NotTestable", "metadata": { "event_code": "Child resource region compliance - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN06", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN06.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625055, "created_time_dt": "2026-06-16T15:50:55Z", "desc": "Compliance test scenario: Child resource region compliance - NotTestable", "title": "Child resource region compliance - NotTestable", "types": [], "uid": "ccc-test-170-1781625055" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625055, "time_dt": "2026-06-16T15:50:55Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Bucket data is replicated to physically separate locations", "metadata": { "event_code": "Bucket data is replicated to physically separate locations", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN08", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetReplicationStatus\" using argument \"{resource-name}\"\n✓ I refer to \"{result}\" as \"replicationStatus\"\n✓ I refer to \"{replicationStatus.Locations}\" as \"locations\"\n✓ I attach \"{replicationStatus}\" to the test output as \"Replication Status\"\n✗ \"{locations}\" is an array of objects with length \"2\" - Error: expected length 2, got 1\n⊘ \"{permitted-regions}\" is an array of objects with at least the following contents (skipped)\n⊘ \"{permitted-regions}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN08.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625055, "created_time_dt": "2026-06-16T15:50:55Z", "desc": "Compliance test scenario: Bucket data is replicated to physically separate locations", "title": "Bucket data is replicated to physically separate locations", "types": [], "uid": "ccc-test-205-1781625055" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625055, "time_dt": "2026-06-16T15:50:55Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Replication status can be retrieved for monitoring", "metadata": { "event_code": "Replication status can be retrieved for monitoring", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN08", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetReplicationStatus\" using argument \"{resource-name}\"\n✓ I refer to \"{result}\" as \"replicationStatus\"\n✓ I attach \"{replicationStatus}\" to the test output as \"Replication Status\"\n✓ I refer to \"{replicationStatus.Locations}\" as \"locations\"\n✗ \"{locations}\" is an array of objects with at least the following contents - Error: expected row not found: map[value:{replication-locations[0]}]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN08.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625055, "created_time_dt": "2026-06-16T15:50:55Z", "desc": "Compliance test scenario: Replication status can be retrieved for monitoring", "title": "Replication status can be retrieved for monitoring", "types": [], "uid": "ccc-test-235-1781625055" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625055, "time_dt": "2026-06-16T15:50:55Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents reading bucket with no access", "metadata": { "event_code": "Service prevents reading bucket with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ListObjects\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-list-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625056, "created_time_dt": "2026-06-16T15:50:56Z", "desc": "Compliance test scenario: Service prevents reading bucket with no access", "title": "Service prevents reading bucket with no access", "types": [], "uid": "ccc-test-272-1781625056" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625056, "time_dt": "2026-06-16T15:50:56Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service allows reading bucket with read access", "metadata": { "event_code": "Service allows reading bucket with read access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ListObjects\" using argument \"{resource-name}\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to list blobs: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e68ba-601e-0070-5ea7-fd146c000000\nTime:2026-06-16T15:50:56.1181795Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"read-list-objects-result.json\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625056, "created_time_dt": "2026-06-16T15:50:56Z", "desc": "Compliance test scenario: Service allows reading bucket with read access", "title": "Service allows reading bucket with read access", "types": [], "uid": "ccc-test-283-1781625056" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625056, "time_dt": "2026-06-16T15:50:56Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents reading object with no access", "metadata": { "event_code": "Service prevents reading object with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-read-object-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625056, "created_time_dt": "2026-06-16T15:50:56Z", "desc": "Compliance test scenario: Service prevents reading object with no access", "title": "Service prevents reading object with no access", "types": [], "uid": "ccc-test-324-1781625056" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625056, "time_dt": "2026-06-16T15:50:56Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service allows reading object with read access", "metadata": { "event_code": "Service allows reading object with read access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to download blob test-object=1781625056691.txt: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-object=1781625056691.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e6bed-601e-0070-0aa7-fd146c000000\nTime:2026-06-16T15:50:57.1956291Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"read-read-object-result.json\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625056, "created_time_dt": "2026-06-16T15:50:56Z", "desc": "Compliance test scenario: Service allows reading object with read access", "title": "Service allows reading object with read access", "types": [], "uid": "ccc-test-337-1781625056" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625056, "time_dt": "2026-06-16T15:50:56Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents creating bucket with no access", "metadata": { "event_code": "Service prevents creating bucket with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-bucket-no-access\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-create-bucket-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625057, "created_time_dt": "2026-06-16T15:50:57Z", "desc": "Compliance test scenario: Service prevents creating bucket with no access", "title": "Service prevents creating bucket with no access", "types": [], "uid": "ccc-test-377-1781625057" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625057, "time_dt": "2026-06-16T15:50:57Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service allows creating bucket with write access", "metadata": { "event_code": "Service allows creating bucket with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-bucket-write\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to create container: failed to create container test-bucket-write: PUT https://finoscccintegrationmain.blob.core.windows.net/test-bucket-write\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation.\nERROR CODE: AuthorizationFailure\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationFailure\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation.\nRequestId:ff4e6c88-601e-0070-18a7-fd146c000000\nTime:2026-06-16T15:50:57.3471600Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"write-create-bucket-result.json\" (skipped)\n⊘ I call \"{storage}\" with \"DeleteBucket\" using argument \"{result.ID}\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625057, "created_time_dt": "2026-06-16T15:50:57Z", "desc": "Compliance test scenario: Service allows creating bucket with write access", "title": "Service allows creating bucket with write access", "types": [], "uid": "ccc-test-389-1781625057" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625057, "time_dt": "2026-06-16T15:50:57Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents writing object with read-only access", "metadata": { "event_code": "Service prevents writing object with read-only access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-write-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"read-create-object-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR04" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625057, "created_time_dt": "2026-06-16T15:50:57Z", "desc": "Compliance test scenario: Service prevents writing object with read-only access", "title": "Service prevents writing object with read-only access", "types": [], "uid": "ccc-test-430-1781625057" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625057, "time_dt": "2026-06-16T15:50:57Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service allows writing object with write access", "metadata": { "event_code": "Service allows writing object with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-write-object={timestamp}.txt\", and \"test content\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob test-write-object=1781625057458.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-write-object=1781625057458.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e6d1d-601e-0070-1ca7-fd146c000000\nTime:2026-06-16T15:50:57.4988273Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"write-create-object-result.json\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR04" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625057, "created_time_dt": "2026-06-16T15:50:57Z", "desc": "Compliance test scenario: Service allows writing object with write access", "title": "Service allows writing object with write access", "types": [], "uid": "ccc-test-442-1781625057" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625057, "time_dt": "2026-06-16T15:50:57Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service enforces uniform bucket-level access by rejecting object-level permissions", "metadata": { "event_code": "Service enforces uniform bucket-level access by rejecting object-level permissions", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN02", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to download blob test-object=1781625057536.txt: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-object=1781625057536.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e6f01-601e-0070-40a7-fd146c000000\nTime:2026-06-16T15:50:58.0336434Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I call \"{storage}\" with \"SetObjectPermission\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"none\" (skipped)\n⊘ \"{result}\" is an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"set-object-permission-error.txt\" (skipped)\n⊘ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\" (skipped)\n⊘ \"{result}\" is not an error (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN02.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625057, "created_time_dt": "2026-06-16T15:50:57Z", "desc": "Compliance test scenario: Service enforces uniform bucket-level access by rejecting object-level permissions", "title": "Service enforces uniform bucket-level access by rejecting object-level permissions", "types": [], "uid": "ccc-test-482-1781625057" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625057, "time_dt": "2026-06-16T15:50:57Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service enforces uniform bucket-level access denial", "metadata": { "event_code": "Service enforces uniform bucket-level access denial", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN02", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I call \"{storage}\" with \"SetObjectPermission\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"read\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"set-object-permission-error.txt\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN02.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625058, "created_time_dt": "2026-06-16T15:50:58Z", "desc": "Compliance test scenario: Service enforces uniform bucket-level access denial", "title": "Service enforces uniform bucket-level access denial", "types": [], "uid": "ccc-test-522-1781625058" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625058, "time_dt": "2026-06-16T15:50:58Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service supports bucket soft delete and recovery", "metadata": { "event_code": "Service supports bucket soft delete and recovery", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN03", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateBucket\" using argument \"ccc-test-soft-delete\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"testBucket\"\n✓ I attach \"{result}\" to the test output as \"created-bucket.json\"\n✓ I call \"{storage}\" with \"DeleteBucket\" using argument \"ccc-test-soft-delete\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"ListDeletedBuckets\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"deleted-buckets.json\"\n✗ \"{result}\" is an array of objects with length \"1\" - Error: expected length 1, got 0\n⊘ I call \"{storage}\" with \"RestoreBucket\" using argument \"ccc-test-soft-delete\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ I call \"{storage}\" with \"ListBuckets\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"restored-buckets.json\" (skipped)\n⊘ I call \"{storage}\" with \"DeleteBucket\" using argument \"ccc-test-soft-delete\" (skipped)\n⊘ \"{result}\" is not an error (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN03.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625058, "created_time_dt": "2026-06-16T15:50:58Z", "desc": "Compliance test scenario: Service supports bucket soft delete and recovery", "title": "Service supports bucket soft delete and recovery", "types": [], "uid": "ccc-test-572-1781625058" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625058, "time_dt": "2026-06-16T15:50:58Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents modification of locked retention policy", "metadata": { "event_code": "Service prevents modification of locked retention policy", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN03", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetBucketRetentionDurationDays\" using argument \"{resource-name}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"originalRetention\"\n✓ I attach \"{result}\" to the test output as \"original-retention-days.txt\"\n✓ \"{result}\" should be greater than \"0\"\n✓ I call \"{storage}\" with \"SetBucketRetentionDurationDays\" using arguments \"{resource-name}\" and \"1\"\n✗ \"{result}\" is an error - Error: expected {result} to be an error, got \u003cnil\u003e\n⊘ I attach \"{result}\" to the test output as \"set-retention-error.txt\" (skipped)\n⊘ I call \"{storage}\" with \"GetBucketRetentionDurationDays\" using argument \"{resource-name}\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ \"{result}\" should be greater than \"0\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN03.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625060, "created_time_dt": "2026-06-16T15:51:00Z", "desc": "Compliance test scenario: Service prevents modification of locked retention policy", "title": "Service prevents modification of locked retention policy", "types": [], "uid": "ccc-test-610-1781625060" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625060, "time_dt": "2026-06-16T15:51:00Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service applies default retention policy to newly uploaded object", "metadata": { "event_code": "Service applies default retention policy to newly uploaded object", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-retention-object={timestamp}.txt\", and \"protected data\"\n✓ I attach \"{result}\" to the test output as \"uploaded-object.json\"\n✓ I call \"{userStorage}\" with \"GetObjectRetentionDurationDays\" using arguments \"{resource-name}\" and \"test-retention-object={timestamp}.txt\"\n✗ \"{result}\" should be greater than \"1\" - Error: cannot parse {result} as number: strconv.ParseFloat: parsing \"failed to get blob properties: HEAD https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/test-retention-object=1781625061510.txt\\n--------------------------------------------------------------------------------\\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\\nERROR CODE: AuthorizationPermissionMismatch\\n--------------------------------------------------------------------------------\\nResponse contained no body\\n--------------------------------------------------------------------------------\\n\": invalid syntax", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625061, "created_time_dt": "2026-06-16T15:51:01Z", "desc": "Compliance test scenario: Service applies default retention policy to newly uploaded object", "title": "Service applies default retention policy to newly uploaded object", "types": [], "uid": "ccc-test-655-1781625061" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625061, "time_dt": "2026-06-16T15:51:01Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service enforces retention policy on newly created objects", "metadata": { "event_code": "Service enforces retention policy on newly created objects", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"immediate-delete-test={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"immediate-delete-test={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"immediate-delete-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625061, "created_time_dt": "2026-06-16T15:51:01Z", "desc": "Compliance test scenario: Service enforces retention policy on newly created objects", "title": "Service enforces retention policy on newly created objects", "types": [], "uid": "ccc-test-664-1781625061" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625061, "time_dt": "2026-06-16T15:51:01Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service validates retention period meets minimum requirements", "metadata": { "event_code": "Service validates retention period meets minimum requirements", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"retention-period-test={timestamp}.txt\", and \"compliance data\"\n✓ I call \"{storage}\" with \"GetObjectRetentionDurationDays\" using arguments \"{resource-name}\" and \"retention-period-test={timestamp}.txt\"\n✓ \"{result}\" should be greater than \"1\"\n✓ I attach \"{result}\" to the test output as \"retention-period-days.json\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625062, "created_time_dt": "2026-06-16T15:51:02Z", "desc": "Compliance test scenario: Service validates retention period meets minimum requirements", "title": "Service validates retention period meets minimum requirements", "types": [], "uid": "ccc-test-672-1781625062" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625062, "time_dt": "2026-06-16T15:51:02Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents object deletion by write user during retention period", "metadata": { "event_code": "Service prevents object deletion by write user during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"protected-object={timestamp}.txt\", and \"immutable data\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob protected-object=1781625063935.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/protected-object=1781625063935.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e8119-601e-0070-7aa7-fd146c000000\nTime:2026-06-16T15:51:03.9766456Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"protected-object.json\" (skipped)\n⊘ I call \"{userStorage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"protected-object={timestamp}.txt\" (skipped)\n⊘ \"{result}\" is an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"delete-protected-error.txt\" (skipped)\n? \"{result}\" should contain one of \"retention, locked, immutable, protected\" (undefined)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625063, "created_time_dt": "2026-06-16T15:51:03Z", "desc": "Compliance test scenario: Service prevents object deletion by write user during retention period", "title": "Service prevents object deletion by write user during retention period", "types": [], "uid": "ccc-test-741-1781625063" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625063, "time_dt": "2026-06-16T15:51:03Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents object deletion by admin user during retention period", "metadata": { "event_code": "Service prevents object deletion by admin user during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"admin-protected-object={timestamp}.txt\", and \"compliance data\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"admin-protected-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"admin-delete-protected-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625064, "created_time_dt": "2026-06-16T15:51:04Z", "desc": "Compliance test scenario: Service prevents object deletion by admin user during retention period", "title": "Service prevents object deletion by admin user during retention period", "types": [], "uid": "ccc-test-750-1781625064" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625064, "time_dt": "2026-06-16T15:51:04Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents object modification during retention period", "metadata": { "event_code": "Service prevents object modification during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"modify-test-object={timestamp}.txt\", and \"original content\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to upload blob modify-test-object=1781625064923.txt: PUT https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/modify-test-object=1781625064923.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e847b-601e-0070-60a7-fd146c000000\nTime:2026-06-16T15:51:04.9622031Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I attach \"{result}\" to the test output as \"original-object.json\" (skipped)\n⊘ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"modify-test-object={timestamp}.txt\", and \"modified content\" (skipped)\n⊘ \"{result}\" is an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"modify-protected-error.txt\" (skipped)\n? \"{result}\" should contain one of \"retention, locked, immutable, protected, exists\" (undefined)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625064, "created_time_dt": "2026-06-16T15:51:04Z", "desc": "Compliance test scenario: Service prevents object modification during retention period", "title": "Service prevents object modification during retention period", "types": [], "uid": "ccc-test-764-1781625064" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625064, "time_dt": "2026-06-16T15:51:04Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service allows object read access during retention period", "metadata": { "event_code": "Service allows object read access during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"readable-protected-object={timestamp}.txt\", and \"readable data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"readable-protected-object={timestamp}.txt\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: failed to download blob readable-protected-object=1781625064997.txt: GET https://finoscccintegrationmain.blob.core.windows.net/finos-ccc-integration-container-main/readable-protected-object=1781625064997.txt\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 This request is not authorized to perform this operation using this permission.\nERROR CODE: AuthorizationPermissionMismatch\n--------------------------------------------------------------------------------\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAuthorizationPermissionMismatch\u003c/Code\u003e\u003cMessage\u003eThis request is not authorized to perform this operation using this permission.\nRequestId:ff4e8604-601e-0070-29a7-fd146c000000\nTime:2026-06-16T15:51:05.4938957Z\u003c/Message\u003e\u003c/Error\u003e\n--------------------------------------------------------------------------------\n\n⊘ I refer to \"{result}\" as \"readResult\" (skipped)\n⊘ I attach \"{result}\" to the test output as \"read-protected-object.json\" (skipped)\n⊘ \"{readResult.Name}\" is \"readable-protected-object={timestamp}.txt\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625064, "created_time_dt": "2026-06-16T15:51:04Z", "desc": "Compliance test scenario: Service allows object read access during retention period", "title": "Service allows object read access during retention period", "types": [], "uid": "ccc-test-778-1781625064" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625064, "time_dt": "2026-06-16T15:51:04Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service enables versioning and objects receive unique version identifiers", "metadata": { "event_code": "Service enables versioning and objects receive unique version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"IsBucketVersioningEnabled\" using argument \"{resource-name}\"\n✓ \"{result}\" is true\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"versioned-object.txt\", and \"test content\"\n✓ I refer to \"{result}\" as \"createdObject\"\n? \"{createdObject.VersionID}\" is not empty (undefined)\n⊘ I attach \"{result}\" to the test output as \"versioned-object.json\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625065, "created_time_dt": "2026-06-16T15:51:05Z", "desc": "Compliance test scenario: Service enables versioning and objects receive unique version identifiers", "title": "Service enables versioning and objects receive unique version identifiers", "types": [], "uid": "ccc-test-808-1781625065" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625065, "time_dt": "2026-06-16T15:51:05Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Modified objects receive new version identifiers", "metadata": { "event_code": "Modified objects receive new version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"original content\"\n✓ I refer to \"{result.VersionID}\" as \"version1\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"modified content\"\n✓ I refer to \"{result.VersionID}\" as \"version2\"\n? \"{version1}\" is not equal to \"{version2}\" (undefined)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625066, "created_time_dt": "2026-06-16T15:51:06Z", "desc": "Compliance test scenario: Modified objects receive new version identifiers", "title": "Modified objects receive new version identifiers", "types": [], "uid": "ccc-test-836-1781625066" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625066, "time_dt": "2026-06-16T15:51:06Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Modified objects receive new version identifiers", "metadata": { "event_code": "Modified objects receive new version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"original content\"\n✓ I refer to \"{result.VersionID}\" as \"version1\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"modified content\"\n✓ I refer to \"{result.VersionID}\" as \"version2\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"{version1}\"\n✓ I attach \"{result}\" to the test output as \"original-content.json\"\n✓ \"{result.Data}\" contains \"original content\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"{version2}\"\n✗ \"{result.Data}\" contains \"modified content\" - Error: expected {result.Data} to contain 'modified content', but got '[original content]'\n⊘ I attach \"{result}\" to the test output as \"modified-content.json\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625067, "created_time_dt": "2026-06-16T15:51:07Z", "desc": "Compliance test scenario: Modified objects receive new version identifiers", "title": "Modified objects receive new version identifiers", "types": [], "uid": "ccc-test-874-1781625067" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625067, "time_dt": "2026-06-16T15:51:07Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Deleted object data can be reloaded from previous version", "metadata": { "event_code": "Deleted object data can be reloaded from previous version", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"recover-deleted-object={timestamp}.txt\", and \"data to retain\"\n✓ I refer to \"{result.VersionID}\" as \"retainedVersionId\"\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"recover-deleted-object={timestamp}.txt\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"recover-deleted-object={timestamp}.txt\", and \"{retainedVersionId}\"\n✓ \"{result.Data}\" contains \"data to retain\"\n✓ I attach \"{result}\" to the test output as \"recovered-deleted-version.json\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR04" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625070, "created_time_dt": "2026-06-16T15:51:10Z", "desc": "Compliance test scenario: Deleted object data can be reloaded from previous version", "title": "Deleted object data can be reloaded from previous version", "types": [], "uid": "ccc-test-914-1781625070" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625070, "time_dt": "2026-06-16T15:51:10Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Deleted object version remains in version list", "metadata": { "event_code": "Deleted object version remains in version list", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"list-deleted-versions-object={timestamp}.txt\", and \"versioned data\"\n✓ I refer to \"{result.VersionID}\" as \"listedVersionId\"\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"list-deleted-versions-object={timestamp}.txt\"\n✓ I call \"{storage}\" with \"ListObjectVersions\" using arguments \"{resource-name}\" and \"list-deleted-versions-object={timestamp}.txt\"\n✗ \"{result}\" is an array of objects with at least the following contents - Error: expected row not found: map[ObjectID:list-deleted-versions-object={timestamp}.txt VersionID:{listedVersionId}]\n⊘ I attach \"{result}\" to the test output as \"versions-after-delete.json\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR04" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625071, "created_time_dt": "2026-06-16T15:51:11Z", "desc": "Compliance test scenario: Deleted object version remains in version list", "title": "Deleted object version remains in version list", "types": [], "uid": "ccc-test-924-1781625071" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625071, "time_dt": "2026-06-16T15:51:11Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "metadata": { "event_code": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN03", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@load-balancer", "@virtual-machines", "@serverless-computing", "@NotTestable" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN03.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625072, "created_time_dt": "2026-06-16T15:51:12Z", "desc": "Compliance test scenario: MFA requirement for destructive operations cannot be tested automatically - NotTestable", "title": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-1294-1781625072" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625072, "time_dt": "2026-06-16T15:51:12Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Verify admin actions are logged with identity and timestamp", "metadata": { "event_code": "Verify admin actions are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"UpdateResourcePolicy\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"Policy Update Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"admin\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"adminLogs\"\n✓ I attach \"{adminLogs}\" to the test output as \"Admin Activity Logs\"\n✗ \"{adminLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625072, "created_time_dt": "2026-06-16T15:51:12Z", "desc": "Compliance test scenario: Verify admin actions are logged with identity and timestamp", "title": "Verify admin actions are logged with identity and timestamp", "types": [], "uid": "ccc-test-1337-1781625072" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625072, "time_dt": "2026-06-16T15:51:12Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Verify data modifications are logged with identity and timestamp", "metadata": { "event_code": "Verify data modifications are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataWrite\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Write Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-write\", and \"{20}\"\n✓ I refer to \"{result}\" as \"dataLogs\"\n✓ I attach \"{dataLogs}\" to the test output as \"Data Write Logs\"\n✗ \"{dataLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625085, "created_time_dt": "2026-06-16T15:51:25Z", "desc": "Compliance test scenario: Verify data modifications are logged with identity and timestamp", "title": "Verify data modifications are logged with identity and timestamp", "types": [], "uid": "ccc-test-1375-1781625085" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625085, "time_dt": "2026-06-16T15:51:25Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Verify data read operations are logged with identity and timestamp", "metadata": { "event_code": "Verify data read operations are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Read Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-read\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"readLogs\"\n✓ I attach \"{readLogs}\" to the test output as \"Data Read Logs\"\n✗ \"{readLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625098, "created_time_dt": "2026-06-16T15:51:38Z", "desc": "Compliance test scenario: Verify data read operations are logged with identity and timestamp", "title": "Verify data read operations are logged with identity and timestamp", "types": [], "uid": "ccc-test-1414-1781625098" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625098, "time_dt": "2026-06-16T15:51:38Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Service prevents data read by user with no access", "metadata": { "event_code": "Service prevents data read by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"{service-type}\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userReadableService\"\n✓ I call \"{userReadableService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-trigger-data-read-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR06" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625112, "created_time_dt": "2026-06-16T15:51:52Z", "desc": "Compliance test scenario: Service prevents data read by user with no access", "title": "Service prevents data read by user with no access", "types": [], "uid": "ccc-test-1442-1781625112" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625112, "time_dt": "2026-06-16T15:51:52Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Enumeration event publishing cannot be tested automatically - NotTestable", "metadata": { "event_code": "Enumeration event publishing cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625112, "created_time_dt": "2026-06-16T15:51:52Z", "desc": "Compliance test scenario: Enumeration event publishing cannot be tested automatically - NotTestable", "title": "Enumeration event publishing cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-1459-1781625112" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625112, "time_dt": "2026-06-16T15:51:52Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Enumeration logging cannot be verified automatically - NotTestable", "metadata": { "event_code": "Enumeration logging cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625112, "created_time_dt": "2026-06-16T15:51:52Z", "desc": "Compliance test scenario: Enumeration logging cannot be verified automatically - NotTestable", "title": "Enumeration logging cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-1478-1781625112" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625112, "time_dt": "2026-06-16T15:51:52Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] }, { "message": "Replication destination trust cannot be verified automatically - NotTestable", "metadata": { "event_code": "Replication destination trust cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN10", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN10.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625112, "created_time_dt": "2026-06-16T15:51:52Z", "desc": "Compliance test scenario: Replication destination trust cannot be verified automatically - NotTestable", "title": "Replication destination trust cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-1496-1781625112" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625112, "time_dt": "2026-06-16T15:51:52Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "status": "ACTIVE", "findings": [], "tags": [], "type": "object-storage", "region": "westus2" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/finos-ccc-integration-rg/providers/Microsoft.Storage/storageAccounts/finoscccintegrationmain" } ] } ]