Object Storage bucket has versioning enabled

Check ID: objectstorage_bucket_versioning_enabled
Provider: Oracle Cloud (OCI)
Service: objectstorage
Severity: MEDIUM
Categories: resilience
Resource type: Bucket

What this check verifies

OCI Object Storage buckets are assessed for versioning being set to Enabled, indicating prior object versions are retained when updates or deletions occur.

Risk

No versioning lets overwrites or deletions permanently remove data, harming availability and integrity. Malicious or accidental actions, automated jobs, or malware can wipe or corrupt objects without rollback, enabling ransomware-style encryption and large-scale data loss.

Recommendation

Enable bucket versioning (Enabled) for data that needs recovery. Apply least privilege to delete and overwrite actions, use retention rules or legal holds for critical data, and add lifecycle policies to manage older versions-providing defense in depth against destructive changes.

Remediation

CLI
Terraform
Dashboard steps

oci os bucket update —namespace-name <NAMESPACE> —bucket-name <BUCKET_NAME> —versioning Enabled

resource "oci_objectstorage_bucket" "<example_resource_name>" {
  compartment_id = "<example_resource_id>"
  name           = "<example_resource_name>"
  namespace      = "<example_resource_id>"
  versioning     = "Enabled" # Critical: enables bucket versioning to pass the check
}

References

Where this check fires

This check runs on every scheduled scan against your Oracle Cloud (OCI) account. Findings appear at Cloud Security → Findings filterable by Check ID = objectstorage_bucket_versioning_enabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

← Back to Oracle Cloud (OCI) checks

Object Storage bucket is not publicly accessible Kubernetes checks

​What this check verifies

​Risk

​Recommendation

​Remediation

​References

​Where this check fires

What this check verifies

Risk

Recommendation

Remediation

References

Where this check fires