Checks
Browse individual security checks available in the Prowler Registry. Filter by cloud provider, severity, or search by check ID.
Browse individual security checks available in the Prowler Registry. Filter by cloud provider, severity, or search by check ID.
objectstorage_bucket_encrypted_with_cmk
OCI Object Storage buckets use customer-managed encryption keys (CMEK) for server-side encryption, with an associated KMS key configured on the bucket.
objectstorage_bucket_logging_enabled
OCI Object Storage buckets have service logs for write access events enabled.
The evaluation identifies buckets with an active write logging category scoped to the bucket and region; only read logging does not satisfy this condition.
objectstorage_bucket_not_publicly_accessible
OCI Object Storage buckets are assessed for public accessibility. Buckets configured as NoPublicAccess deny anonymous reads; any other public access setting indicates bucket contents may be reachable without authentication.
objectstorage_bucket_versioning_enabled
OCI Object Storage buckets are assessed for versioning being set to Enabled, indicating prior object versions are retained when updates or deletions occur.