โ† All demos
# cloud-ops ยท 6 members ยท Snippy reports here every morning
โ˜† ๐Ÿ””
migrate wikiMessage #cloud-ops
aster-ridge / infraPull requestsActionsSecurity

Block public access on aster-ridge-uploads (AC-S3-004) #219

โއ Open snippy wants to merge 1 commit into main from tudovu/repair/uploads-public-access
ConversationCommits 1Checks 4Files changed 1
snippy commented 7:41 AM
The check AC-S3-004 (SOC 2 CC6.1, CIS 2.1.1) regressed overnight: aster-ridge-uploads accepts public ACLs again. This adds the account's standard public access block to the bucket and nothing else. The deploy preview below planned the change set in the account; one resource changes.
Tudovu deploy preview ยท planning the change setrunning
Gitleakspassed
Semgreppassed
Tudovu guardrails ยท 1 resource, nothing removedpassed
Merge pull requestAll checks have passed ยท 1 approval by david-thompson
Tudovu

A morning with Snippy.

Your cloud gets a colleague that reviews, proposes and proves.

0:00 / 0:00