Storage buckets publicly listable
Scan rule · RSC-SEC-016
- Security
- Severity: Medium
- CWE-284
Checks whether file buckets hand out their object listing anonymously.
Scan tier
- External scan (anonymous)
How to fix it
Make buckets private and serve downloads through signed URLs.