Plugin Title | Instance Policy Protection |
Cloud | ORACLE |
Category | Compute |
Description | Ensures policy statements have deletion protection for compute instances unless it is an administrator group. |
More Info | Adding deletion protection to Oracle compute instance policies mitigates unintended deletion of instances by unauthorized users or groups. |
ORACLE Link | https://docs.cloud.oracle.com/iaas/Content/Security/Reference/iam_security.htm |
Recommended Action | When writing policies, avoid blanket statements, and add a where statement with the line request.permission != INSTANCE_DELETE. |
This repository has been archived by the owner on Sep 11, 2023. It is now read-only.