Skip to main content

OSS bucket referer hotlink protection configured

ID: rule:aliyun:oss-bucket-referer-limit
Severity: low

Description​

OSS bucket has referer hotlink protection enabled with a configured whitelist.

Reason for Violation​

OSS bucket does not have referer hotlink protection configured, which may lead to unauthorized access and bandwidth theft.

Recommendation​

Configure referer whitelist for OSS bucket by setting RefererConfiguration with a non-empty RefererList.

Resource Types​

  • ALIYUN::OSS::Bucket