Object buckets holding citizen PII must block public ACLs, and municipal file shares must require authenticated access only. Which storage security stance is correct?
Select an answer to reveal the explanation.
Short Explanation
PII buckets are not a public bulletin board—lock down ACLs and make people authenticate. Same story for file shares: no anonymous free-for-all. Open writes and world-readable SSNs are how a data breach writes itself.
Full Explanation
Storage security for object and file services includes blocking public ACLs on buckets that contain PII and requiring authenticated access to file shares. Anonymous write, world-readable sensitive objects, and uncontrolled NFS exports violate confidentiality expectations for municipal data. Cloud+ best practices treat storage access controls as a core cloud security control.