[ { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150334, "created_time_dt": "2026-06-22T17:45:34Z", "desc": "Compliance test scenario: Service accepts TLS 1.3 encrypted traffic", "title": "Service accepts TLS 1.3 encrypted traffic", "types": [], "uid": "ccc-test-1023-1782150334" }, "message": "Service accepts TLS 1.3 encrypted traffic", "metadata": { "event_code": "Service accepts TLS 1.3 encrypted traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_3\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ \"{connection}\" state is open\n✓ \"{connection.State}\" is \"open\"\n✓ I close connection \"{connection}\"\n✓ \"{connection}\" state is closed", "status_id": 1, "time": 1782150334, "time_dt": "2026-06-22T17:45:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150334, "created_time_dt": "2026-06-22T17:45:34Z", "desc": "Compliance test scenario: Service rejects TLS 1.2 traffic", "title": "Service rejects TLS 1.2 traffic", "types": [], "uid": "ccc-test-1029-1782150334" }, "message": "Service rejects TLS 1.2 traffic", "metadata": { "event_code": "Service rejects TLS 1.2 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_2\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "time": 1782150334, "time_dt": "2026-06-22T17:45:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150334, "created_time_dt": "2026-06-22T17:45:34Z", "desc": "Compliance test scenario: Service rejects TLS 1.1 traffic", "title": "Service rejects TLS 1.1 traffic", "types": [], "uid": "ccc-test-1035-1782150334" }, "message": "Service rejects TLS 1.1 traffic", "metadata": { "event_code": "Service rejects TLS 1.1 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_1\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "time": 1782150334, "time_dt": "2026-06-22T17:45:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: Service rejects TLS 1.0 traffic", "title": "Service rejects TLS 1.0 traffic", "types": [], "uid": "ccc-test-1041-1782150335" }, "message": "Service rejects TLS 1.0 traffic", "metadata": { "event_code": "Service rejects TLS 1.0 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: Verify SSL/TLS protocol support", "title": "Verify SSL/TLS protocol support", "types": [], "uid": "ccc-test-1046-1782150335" }, "message": "Verify SSL/TLS protocol support", "metadata": { "event_code": "Verify SSL/TLS protocol support", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"protocols\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_protocols_avmstor20260616.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects which doesn't contain any of (skipped)\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: Verify no known SSL/TLS vulnerabilities", "title": "Verify no known SSL/TLS vulnerabilities", "types": [], "uid": "ccc-test-1050-1782150335" }, "message": "Verify no known SSL/TLS vulnerabilities", "metadata": { "event_code": "Verify no known SSL/TLS vulnerabilities", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"vulnerable\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_vulnerable_avmstor20260616.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: Verify TLS 1.3 only certificate validity", "title": "Verify TLS 1.3 only certificate validity", "types": [], "uid": "ccc-test-1054-1782150335" }, "message": "Verify TLS 1.3 only certificate validity", "metadata": { "event_code": "Verify TLS 1.3 only certificate validity", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"server-defaults\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_server-defaults_avmstor20260616.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: HTTP redirects to HTTPS", "title": "HTTP redirects to HTTPS", "types": [], "uid": "ccc-test-1166-1782150335" }, "message": "HTTP redirects to HTTPS", "metadata": { "event_code": "HTTP redirects to HTTPS", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@http", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a client connects to \"{host-name}\" with protocol \"http\" on port \"80\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ \"{connection}\" is not an error\n✓ I transmit \"GET / HTTP/1.1\\r\\nHost: {host-name}\\r\\n\\r\\n\" to \"{connection}\"\n✓ I attach \"{connection}\" to the test output as \"HTTP response\"\n✗ \"{connection.Output}\" contains \"301\" - Error: expected {connection.Output} to contain '301', but got 'HTTP/1.1 400 The account being accessed does not support http.\r\nContent-Length: 280\r\nContent-Type: application/xml\r\nServer: Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: ecc109d3-501e-0024-216e-0231ae000000\r\nDate: Mon, 22 Jun 2026 17:45:34 GMT\r\n\r\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAccountRequiresHttps\u003c/Code\u003e\u003cMessage\u003eThe account being accessed does not support http.\nRequestId:ecc109d3-501e-0024-216e-0231ae000000\nTime:2026-06-22T17:45:35.1377306Z\u003c/Message\u003e\u003cAccountName\u003eavmstor20260616\u003c/AccountName\u003e\u003c/Error\u003e'\n⊘ I call \"{connection}\" with \"Close\" (skipped)\n⊘ \"{connection.State}\" is \"closed\" (skipped)", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: Only secure protocols are exposed", "title": "Only secure protocols are exposed", "types": [], "uid": "ccc-test-1179-1782150335" }, "message": "Only secure protocols are exposed", "metadata": { "event_code": "Only secure protocols are exposed", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"protocols\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_protocols_avmstor20260616.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: Verify HTTPS uses IANA-assigned port 443", "title": "Verify HTTPS uses IANA-assigned port 443", "types": [], "uid": "ccc-test-1243-1782150335" }, "message": "Verify HTTPS uses IANA-assigned port 443", "metadata": { "event_code": "Verify HTTPS uses IANA-assigned port 443", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@http", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ \"{port-number}\" is \"443\"", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR07" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150335, "created_time_dt": "2026-06-22T17:45:35Z", "desc": "Compliance test scenario: Verify mTLS requires client certificate authentication", "title": "Verify mTLS requires client certificate authentication", "types": [], "uid": "ccc-test-1275-1782150335" }, "message": "Verify mTLS requires client certificate authentication", "metadata": { "event_code": "Verify mTLS requires client certificate authentication", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-red", "@tls", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": "https service on avmstor20260616.blob.core.windows.net:443", "metadata": { "findings": [], "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "avmstor20260616.blob.core.windows.net", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"server-defaults\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_server-defaults_avmstor20260616.blob.core.windows.net_443.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1782150335, "time_dt": "2026-06-22T17:45:35Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR08" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150282, "created_time_dt": "2026-06-22T17:44:42Z", "desc": "Compliance test scenario: Verify objects are encrypted at rest", "title": "Verify objects are encrypted at rest", "types": [], "uid": "ccc-test-30-1782150282" }, "message": "Verify objects are encrypted at rest", "metadata": { "event_code": "Verify objects are encrypted at rest", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN02", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-encryption-check={timestamp}.txt\", and \"encryption test data\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"uploadResult\"\n✓ \"{uploadResult.Encryption}\" is not null\n✓ \"{uploadResult.EncryptionAlgorithm}\" is \"AES256\"\n✓ I attach \"{uploadResult}\" to the test output as \"Upload Result with Encryption Details\"", "status_id": 1, "time": 1782150282, "time_dt": "2026-06-22T17:44:42Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN02.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150282, "created_time_dt": "2026-06-22T17:44:42Z", "desc": "Compliance test scenario: Service prevents data modification by user with no access", "title": "Service prevents data modification by user with no access", "types": [], "uid": "ccc-test-71-1782150282" }, "message": "Service prevents data modification by user with no access", "metadata": { "event_code": "Service prevents data modification by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-cn05-unauthorized-modify={timestamp}.txt\", and \"unauthorized data\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-create-error.txt\"", "status_id": 1, "time": 1782150282, "time_dt": "2026-06-22T17:44:42Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150282, "created_time_dt": "2026-06-22T17:44:42Z", "desc": "Compliance test scenario: Service allows data modification by user with write access", "title": "Service allows data modification by user with write access", "types": [], "uid": "ccc-test-81-1782150282" }, "message": "Service allows data modification by user with write access", "metadata": { "event_code": "Service allows data modification by user with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-cn05-authorized-modify={timestamp}.txt\", and \"authorized data\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-create-object-result.json\"", "status_id": 1, "time": 1782150282, "time_dt": "2026-06-22T17:44:42Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150283, "created_time_dt": "2026-06-22T17:44:43Z", "desc": "Compliance test scenario: Service prevents administrative action (creating a new bucket) by user with no access", "title": "Service prevents administrative action (creating a new bucket) by user with no access", "types": [], "uid": "ccc-test-132-1782150283" }, "message": "Service prevents administrative action (creating a new bucket) by user with no access", "metadata": { "event_code": "Service prevents administrative action (creating a new bucket) by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-unauthorized-admin-container\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-admin-create-bucket-error.txt\"", "status_id": 1, "time": 1782150283, "time_dt": "2026-06-22T17:44:43Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150283, "created_time_dt": "2026-06-22T17:44:43Z", "desc": "Compliance test scenario: Service prevents administrative action (creating a new bucket) by user with read-only access", "title": "Service prevents administrative action (creating a new bucket) by user with read-only access", "types": [], "uid": "ccc-test-142-1782150283" }, "message": "Service prevents administrative action (creating a new bucket) by user with read-only access", "metadata": { "event_code": "Service prevents administrative action (creating a new bucket) by user with read-only access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-read-only-create-container\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"read-only-create-bucket-error.txt\"", "status_id": 1, "time": 1782150283, "time_dt": "2026-06-22T17:44:43Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150283, "created_time_dt": "2026-06-22T17:44:43Z", "desc": "Compliance test scenario: Service allows administrative action (creating a new bucket) by user with admin access", "title": "Service allows administrative action (creating a new bucket) by user with admin access", "types": [], "uid": "ccc-test-153-1782150283" }, "message": "Service allows administrative action (creating a new bucket) by user with admin access", "metadata": { "event_code": "Service allows administrative action (creating a new bucket) by user with admin access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-admin\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-cn05-authorized-admin-container\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"admin-create-bucket-result.json\"\n✓ I call \"{storage}\" with \"DeleteBucket\" using argument \"test-cn05-authorized-admin-container\"", "status_id": 1, "time": 1782150283, "time_dt": "2026-06-22T17:44:43Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150284, "created_time_dt": "2026-06-22T17:44:44Z", "desc": "Compliance test scenario: Child resource region compliance - NotTestable", "title": "Child resource region compliance - NotTestable", "types": [], "uid": "ccc-test-170-1782150284" }, "message": "Child resource region compliance - NotTestable", "metadata": { "event_code": "Child resource region compliance - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN06", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1782150284, "time_dt": "2026-06-22T17:44:44Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN06.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150284, "created_time_dt": "2026-06-22T17:44:44Z", "desc": "Compliance test scenario: Bucket data is replicated to physically separate locations", "title": "Bucket data is replicated to physically separate locations", "types": [], "uid": "ccc-test-205-1782150284" }, "message": "Bucket data is replicated to physically separate locations", "metadata": { "event_code": "Bucket data is replicated to physically separate locations", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN08", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetReplicationStatus\" using argument \"{resource-name}\"\n✓ I refer to \"{result}\" as \"replicationStatus\"\n✓ I refer to \"{replicationStatus.Locations}\" as \"locations\"\n✓ I attach \"{replicationStatus}\" to the test output as \"Replication Status\"\n✗ \"{locations}\" is an array of objects with length \"2\" - Error: expected length 2, got 1\n⊘ \"{permitted-regions}\" is an array of objects with at least the following contents (skipped)\n⊘ \"{permitted-regions}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1782150284, "time_dt": "2026-06-22T17:44:44Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN08.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150284, "created_time_dt": "2026-06-22T17:44:44Z", "desc": "Compliance test scenario: Replication status can be retrieved for monitoring", "title": "Replication status can be retrieved for monitoring", "types": [], "uid": "ccc-test-235-1782150284" }, "message": "Replication status can be retrieved for monitoring", "metadata": { "event_code": "Replication status can be retrieved for monitoring", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN08", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetReplicationStatus\" using argument \"{resource-name}\"\n✓ I refer to \"{result}\" as \"replicationStatus\"\n✓ I attach \"{replicationStatus}\" to the test output as \"Replication Status\"\n✓ I refer to \"{replicationStatus.Locations}\" as \"locations\"\n✗ \"{locations}\" is an array of objects with at least the following contents - Error: expected row not found: map[value:{replication-locations[0]}]", "status_id": 1, "time": 1782150284, "time_dt": "2026-06-22T17:44:44Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN08.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150284, "created_time_dt": "2026-06-22T17:44:44Z", "desc": "Compliance test scenario: Service prevents reading bucket with no access", "title": "Service prevents reading bucket with no access", "types": [], "uid": "ccc-test-272-1782150284" }, "message": "Service prevents reading bucket with no access", "metadata": { "event_code": "Service prevents reading bucket with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ListObjects\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-list-error.txt\"", "status_id": 1, "time": 1782150284, "time_dt": "2026-06-22T17:44:44Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150284, "created_time_dt": "2026-06-22T17:44:44Z", "desc": "Compliance test scenario: Service allows reading bucket with read access", "title": "Service allows reading bucket with read access", "types": [], "uid": "ccc-test-283-1782150284" }, "message": "Service allows reading bucket with read access", "metadata": { "event_code": "Service allows reading bucket with read access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ListObjects\" using argument \"{resource-name}\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-list-objects-result.json\"", "status_id": 1, "time": 1782150284, "time_dt": "2026-06-22T17:44:44Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150284, "created_time_dt": "2026-06-22T17:44:44Z", "desc": "Compliance test scenario: Service prevents reading object with no access", "title": "Service prevents reading object with no access", "types": [], "uid": "ccc-test-324-1782150284" }, "message": "Service prevents reading object with no access", "metadata": { "event_code": "Service prevents reading object with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-read-object-error.txt\"", "status_id": 1, "time": 1782150284, "time_dt": "2026-06-22T17:44:44Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150285, "created_time_dt": "2026-06-22T17:44:45Z", "desc": "Compliance test scenario: Service allows reading object with read access", "title": "Service allows reading object with read access", "types": [], "uid": "ccc-test-337-1782150285" }, "message": "Service allows reading object with read access", "metadata": { "event_code": "Service allows reading object with read access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"read-read-object-result.json\"", "status_id": 1, "time": 1782150285, "time_dt": "2026-06-22T17:44:45Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150286, "created_time_dt": "2026-06-22T17:44:46Z", "desc": "Compliance test scenario: Service prevents creating bucket with no access", "title": "Service prevents creating bucket with no access", "types": [], "uid": "ccc-test-377-1782150286" }, "message": "Service prevents creating bucket with no access", "metadata": { "event_code": "Service prevents creating bucket with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-bucket-no-access\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-create-bucket-error.txt\"", "status_id": 1, "time": 1782150286, "time_dt": "2026-06-22T17:44:46Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150286, "created_time_dt": "2026-06-22T17:44:46Z", "desc": "Compliance test scenario: Service allows creating bucket with write access", "title": "Service allows creating bucket with write access", "types": [], "uid": "ccc-test-389-1782150286" }, "message": "Service allows creating bucket with write access", "metadata": { "event_code": "Service allows creating bucket with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateBucket\" using argument \"test-bucket-write\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-create-bucket-result.json\"\n✓ I call \"{storage}\" with \"DeleteBucket\" using argument \"{result.ID}\"", "status_id": 1, "time": 1782150286, "time_dt": "2026-06-22T17:44:46Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150286, "created_time_dt": "2026-06-22T17:44:46Z", "desc": "Compliance test scenario: Service prevents writing object with read-only access", "title": "Service prevents writing object with read-only access", "types": [], "uid": "ccc-test-430-1782150286" }, "message": "Service prevents writing object with read-only access", "metadata": { "event_code": "Service prevents writing object with read-only access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-write-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"read-create-object-error.txt\"", "status_id": 1, "time": 1782150286, "time_dt": "2026-06-22T17:44:46Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150286, "created_time_dt": "2026-06-22T17:44:46Z", "desc": "Compliance test scenario: Service allows writing object with write access", "title": "Service allows writing object with write access", "types": [], "uid": "ccc-test-442-1782150286" }, "message": "Service allows writing object with write access", "metadata": { "event_code": "Service allows writing object with write access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN01", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-storage-service.json\"\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-write-object={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"write-create-object-result.json\"", "status_id": 1, "time": 1782150286, "time_dt": "2026-06-22T17:44:46Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN01.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150286, "created_time_dt": "2026-06-22T17:44:46Z", "desc": "Compliance test scenario: Service enforces uniform bucket-level access by rejecting object-level permissions", "title": "Service enforces uniform bucket-level access by rejecting object-level permissions", "types": [], "uid": "ccc-test-482-1782150286" }, "message": "Service enforces uniform bucket-level access by rejecting object-level permissions", "metadata": { "event_code": "Service enforces uniform bucket-level access by rejecting object-level permissions", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN02", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"SetObjectPermission\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"none\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"set-object-permission-error.txt\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is not an error", "status_id": 1, "time": 1782150286, "time_dt": "2026-06-22T17:44:46Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN02.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150287, "created_time_dt": "2026-06-22T17:44:47Z", "desc": "Compliance test scenario: Service enforces uniform bucket-level access denial", "title": "Service enforces uniform bucket-level access denial", "types": [], "uid": "ccc-test-522-1782150287" }, "message": "Service enforces uniform bucket-level access denial", "metadata": { "event_code": "Service enforces uniform bucket-level access denial", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN02", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"test data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I call \"{storage}\" with \"SetObjectPermission\" using arguments \"{resource-name}\", \"test-object={timestamp}.txt\", and \"read\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"set-object-permission-error.txt\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"test-object={timestamp}.txt\"\n✓ \"{result}\" is an error", "status_id": 1, "time": 1782150287, "time_dt": "2026-06-22T17:44:47Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN02.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150287, "created_time_dt": "2026-06-22T17:44:47Z", "desc": "Compliance test scenario: Service supports bucket soft delete and recovery", "title": "Service supports bucket soft delete and recovery", "types": [], "uid": "ccc-test-572-1782150287" }, "message": "Service supports bucket soft delete and recovery", "metadata": { "event_code": "Service supports bucket soft delete and recovery", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN03", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateBucket\" using argument \"ccc-test-soft-delete\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"testBucket\"\n✓ I attach \"{result}\" to the test output as \"created-bucket.json\"\n✓ I call \"{storage}\" with \"DeleteBucket\" using argument \"ccc-test-soft-delete\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"ListDeletedBuckets\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"deleted-buckets.json\"\n✗ \"{result}\" is an array of objects with length \"1\" - Error: expected length 1, got 45\n⊘ I call \"{storage}\" with \"RestoreBucket\" using argument \"ccc-test-soft-delete\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ I call \"{storage}\" with \"ListBuckets\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ I attach \"{result}\" to the test output as \"restored-buckets.json\" (skipped)\n⊘ I call \"{storage}\" with \"DeleteBucket\" using argument \"ccc-test-soft-delete\" (skipped)\n⊘ \"{result}\" is not an error (skipped)", "status_id": 1, "time": 1782150287, "time_dt": "2026-06-22T17:44:47Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN03.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150289, "created_time_dt": "2026-06-22T17:44:49Z", "desc": "Compliance test scenario: Service prevents modification of locked retention policy", "title": "Service prevents modification of locked retention policy", "types": [], "uid": "ccc-test-610-1782150289" }, "message": "Service prevents modification of locked retention policy", "metadata": { "event_code": "Service prevents modification of locked retention policy", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN03", "@PerService", "@object-storage", "@tlp-amber", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"GetBucketRetentionDurationDays\" using argument \"{resource-name}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"originalRetention\"\n✓ I attach \"{result}\" to the test output as \"original-retention-days.txt\"\n✓ \"{result}\" should be greater than \"0\"\n✓ I call \"{storage}\" with \"SetBucketRetentionDurationDays\" using arguments \"{resource-name}\" and \"1\"\n✗ \"{result}\" is an error - Error: expected {result} to be an error, got \u003cnil\u003e\n⊘ I attach \"{result}\" to the test output as \"set-retention-error.txt\" (skipped)\n⊘ I call \"{storage}\" with \"GetBucketRetentionDurationDays\" using argument \"{resource-name}\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ \"{result}\" should be greater than \"0\" (skipped)", "status_id": 1, "time": 1782150289, "time_dt": "2026-06-22T17:44:49Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN03.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150290, "created_time_dt": "2026-06-22T17:44:50Z", "desc": "Compliance test scenario: Service applies default retention policy to newly uploaded object", "title": "Service applies default retention policy to newly uploaded object", "types": [], "uid": "ccc-test-655-1782150290" }, "message": "Service applies default retention policy to newly uploaded object", "metadata": { "event_code": "Service applies default retention policy to newly uploaded object", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"test-retention-object={timestamp}.txt\", and \"protected data\"\n✓ I attach \"{result}\" to the test output as \"uploaded-object.json\"\n✓ I call \"{userStorage}\" with \"GetObjectRetentionDurationDays\" using arguments \"{resource-name}\" and \"test-retention-object={timestamp}.txt\"\n✓ \"{result}\" should be greater than \"1\"", "status_id": 1, "time": 1782150290, "time_dt": "2026-06-22T17:44:50Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150290, "created_time_dt": "2026-06-22T17:44:50Z", "desc": "Compliance test scenario: Service enforces retention policy on newly created objects", "title": "Service enforces retention policy on newly created objects", "types": [], "uid": "ccc-test-664-1782150290" }, "message": "Service enforces retention policy on newly created objects", "metadata": { "event_code": "Service enforces retention policy on newly created objects", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"immediate-delete-test={timestamp}.txt\", and \"test content\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"immediate-delete-test={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"immediate-delete-error.txt\"", "status_id": 1, "time": 1782150290, "time_dt": "2026-06-22T17:44:50Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150291, "created_time_dt": "2026-06-22T17:44:51Z", "desc": "Compliance test scenario: Service validates retention period meets minimum requirements", "title": "Service validates retention period meets minimum requirements", "types": [], "uid": "ccc-test-672-1782150291" }, "message": "Service validates retention period meets minimum requirements", "metadata": { "event_code": "Service validates retention period meets minimum requirements", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"retention-period-test={timestamp}.txt\", and \"compliance data\"\n✓ I call \"{storage}\" with \"GetObjectRetentionDurationDays\" using arguments \"{resource-name}\" and \"retention-period-test={timestamp}.txt\"\n✓ \"{result}\" should be greater than \"1\"\n✓ I attach \"{result}\" to the test output as \"retention-period-days.json\"", "status_id": 1, "time": 1782150291, "time_dt": "2026-06-22T17:44:51Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150292, "created_time_dt": "2026-06-22T17:44:52Z", "desc": "Compliance test scenario: Service prevents object deletion by write user during retention period", "title": "Service prevents object deletion by write user during retention period", "types": [], "uid": "ccc-test-741-1782150292" }, "message": "Service prevents object deletion by write user during retention period", "metadata": { "event_code": "Service prevents object deletion by write user during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"protected-object={timestamp}.txt\", and \"immutable data\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"protected-object.json\"\n✓ I call \"{userStorage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"protected-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"delete-protected-error.txt\"\n? \"{result}\" should contain one of \"retention, locked, immutable, protected\" (undefined)", "status_id": 1, "time": 1782150292, "time_dt": "2026-06-22T17:44:52Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150292, "created_time_dt": "2026-06-22T17:44:52Z", "desc": "Compliance test scenario: Service prevents object deletion by admin user during retention period", "title": "Service prevents object deletion by admin user during retention period", "types": [], "uid": "ccc-test-750-1782150292" }, "message": "Service prevents object deletion by admin user during retention period", "metadata": { "event_code": "Service prevents object deletion by admin user during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"admin-protected-object={timestamp}.txt\", and \"compliance data\"\n✓ \"{result}\" is not an error\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"admin-protected-object={timestamp}.txt\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"admin-delete-protected-error.txt\"", "status_id": 1, "time": 1782150292, "time_dt": "2026-06-22T17:44:52Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150293, "created_time_dt": "2026-06-22T17:44:53Z", "desc": "Compliance test scenario: Service prevents object modification during retention period", "title": "Service prevents object modification during retention period", "types": [], "uid": "ccc-test-764-1782150293" }, "message": "Service prevents object modification during retention period", "metadata": { "event_code": "Service prevents object modification during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-write\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"modify-test-object={timestamp}.txt\", and \"original content\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"original-object.json\"\n✓ I call \"{userStorage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"modify-test-object={timestamp}.txt\", and \"modified content\"\n✗ \"{result}\" is an error - Error: expected {result} to be an error, got *objstorage.Object\n⊘ I attach \"{result}\" to the test output as \"modify-protected-error.txt\" (skipped)\n? \"{result}\" should contain one of \"retention, locked, immutable, protected, exists\" (undefined)", "status_id": 1, "time": 1782150293, "time_dt": "2026-06-22T17:44:53Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150293, "created_time_dt": "2026-06-22T17:44:53Z", "desc": "Compliance test scenario: Service allows object read access during retention period", "title": "Service allows object read access during retention period", "types": [], "uid": "ccc-test-778-1782150293" }, "message": "Service allows object read access during retention period", "metadata": { "event_code": "Service allows object read access during retention period", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN04", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"readable-protected-object={timestamp}.txt\", and \"readable data\"\n✓ \"{result}\" is not an error\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"object-storage\" and \"test-user-read\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userStorage\"\n✓ I call \"{userStorage}\" with \"ReadObject\" using arguments \"{resource-name}\" and \"readable-protected-object={timestamp}.txt\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"readResult\"\n✓ I attach \"{result}\" to the test output as \"read-protected-object.json\"\n✓ \"{readResult.Name}\" is \"readable-protected-object={timestamp}.txt\"", "status_id": 1, "time": 1782150293, "time_dt": "2026-06-22T17:44:53Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150293, "created_time_dt": "2026-06-22T17:44:53Z", "desc": "Compliance test scenario: Service enables versioning and objects receive unique version identifiers", "title": "Service enables versioning and objects receive unique version identifiers", "types": [], "uid": "ccc-test-808-1782150293" }, "message": "Service enables versioning and objects receive unique version identifiers", "metadata": { "event_code": "Service enables versioning and objects receive unique version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"IsBucketVersioningEnabled\" using argument \"{resource-name}\"\n✓ \"{result}\" is true\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"versioned-object.txt\", and \"test content\"\n✓ I refer to \"{result}\" as \"createdObject\"\n? \"{createdObject.VersionID}\" is not empty (undefined)\n⊘ I attach \"{result}\" to the test output as \"versioned-object.json\" (skipped)", "status_id": 1, "time": 1782150293, "time_dt": "2026-06-22T17:44:53Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150294, "created_time_dt": "2026-06-22T17:44:54Z", "desc": "Compliance test scenario: Modified objects receive new version identifiers", "title": "Modified objects receive new version identifiers", "types": [], "uid": "ccc-test-836-1782150294" }, "message": "Modified objects receive new version identifiers", "metadata": { "event_code": "Modified objects receive new version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"original content\"\n✓ I refer to \"{result.VersionID}\" as \"version1\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"modified content\"\n✓ I refer to \"{result.VersionID}\" as \"version2\"\n? \"{version1}\" is not equal to \"{version2}\" (undefined)", "status_id": 1, "time": 1782150294, "time_dt": "2026-06-22T17:44:54Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150295, "created_time_dt": "2026-06-22T17:44:55Z", "desc": "Compliance test scenario: Modified objects receive new version identifiers", "title": "Modified objects receive new version identifiers", "types": [], "uid": "ccc-test-874-1782150295" }, "message": "Modified objects receive new version identifiers", "metadata": { "event_code": "Modified objects receive new version identifiers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"original content\"\n✓ I refer to \"{result.VersionID}\" as \"version1\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"modified content\"\n✓ I refer to \"{result.VersionID}\" as \"version2\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"{version1}\"\n✓ I attach \"{result}\" to the test output as \"original-content.json\"\n✓ \"{result.Data}\" contains \"original content\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"version-test-object={timestamp}.txt\", and \"{version2}\"\n✗ \"{result.Data}\" contains \"modified content\" - Error: expected {result.Data} to contain 'modified content', but got '[original content]'\n⊘ I attach \"{result}\" to the test output as \"modified-content.json\" (skipped)", "status_id": 1, "time": 1782150295, "time_dt": "2026-06-22T17:44:55Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150297, "created_time_dt": "2026-06-22T17:44:57Z", "desc": "Compliance test scenario: Deleted object data can be reloaded from previous version", "title": "Deleted object data can be reloaded from previous version", "types": [], "uid": "ccc-test-914-1782150297" }, "message": "Deleted object data can be reloaded from previous version", "metadata": { "event_code": "Deleted object data can be reloaded from previous version", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"recover-deleted-object={timestamp}.txt\", and \"data to retain\"\n✓ I refer to \"{result.VersionID}\" as \"retainedVersionId\"\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"recover-deleted-object={timestamp}.txt\"\n✓ I call \"{storage}\" with \"ReadObjectAtVersion\" using arguments \"{resource-name}\", \"recover-deleted-object={timestamp}.txt\", and \"{retainedVersionId}\"\n✓ \"{result.Data}\" contains \"data to retain\"\n✓ I attach \"{result}\" to the test output as \"recovered-deleted-version.json\"", "status_id": 1, "time": 1782150297, "time_dt": "2026-06-22T17:44:57Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150299, "created_time_dt": "2026-06-22T17:44:59Z", "desc": "Compliance test scenario: Deleted object version remains in version list", "title": "Deleted object version remains in version list", "types": [], "uid": "ccc-test-924-1782150299" }, "message": "Deleted object version remains in version list", "metadata": { "event_code": "Deleted object version remains in version list", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.ObjStor", "@CCC.ObjStor.CN05", "@PerService", "@object-storage", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"object-storage\"\n✓ I refer to \"{result}\" as \"storage\"\n✓ I call \"{storage}\" with \"CreateObject\" using arguments \"{resource-name}\", \"list-deleted-versions-object={timestamp}.txt\", and \"versioned data\"\n✓ I refer to \"{result.VersionID}\" as \"listedVersionId\"\n✓ I call \"{storage}\" with \"DeleteObject\" using arguments \"{resource-name}\" and \"list-deleted-versions-object={timestamp}.txt\"\n✓ I call \"{storage}\" with \"ListObjectVersions\" using arguments \"{resource-name}\" and \"list-deleted-versions-object={timestamp}.txt\"\n✓ \"{result}\" is an array of objects with at least the following contents\n✓ I attach \"{result}\" to the test output as \"versions-after-delete.json\"", "status_id": 1, "time": 1782150299, "time_dt": "2026-06-22T17:44:59Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.ObjStor.CN05.AR04" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150300, "created_time_dt": "2026-06-22T17:45:00Z", "desc": "Compliance test scenario: MFA requirement for destructive operations cannot be tested automatically - NotTestable", "title": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-1294-1782150300" }, "message": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "metadata": { "event_code": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN03", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@load-balancer", "@virtual-machines", "@serverless-computing", "@NotTestable" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1782150300, "time_dt": "2026-06-22T17:45:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN03.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150300, "created_time_dt": "2026-06-22T17:45:00Z", "desc": "Compliance test scenario: Verify admin actions are logged with identity and timestamp", "title": "Verify admin actions are logged with identity and timestamp", "types": [], "uid": "ccc-test-1337-1782150300" }, "message": "Verify admin actions are logged with identity and timestamp", "metadata": { "event_code": "Verify admin actions are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"UpdateResourcePolicy\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"Policy Update Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"admin\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"adminLogs\"\n✓ I attach \"{adminLogs}\" to the test output as \"Admin Activity Logs\"\n✗ \"{adminLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "time": 1782150300, "time_dt": "2026-06-22T17:45:00Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150312, "created_time_dt": "2026-06-22T17:45:12Z", "desc": "Compliance test scenario: Verify data modifications are logged with identity and timestamp", "title": "Verify data modifications are logged with identity and timestamp", "types": [], "uid": "ccc-test-1375-1782150312" }, "message": "Verify data modifications are logged with identity and timestamp", "metadata": { "event_code": "Verify data modifications are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataWrite\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Write Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-write\", and \"{20}\"\n✓ I refer to \"{result}\" as \"dataLogs\"\n✓ I attach \"{dataLogs}\" to the test output as \"Data Write Logs\"\n✗ \"{dataLogs}\" is an array of objects with at least the following contents - Error: field {dataLogs} is not an array", "status_id": 1, "time": 1782150312, "time_dt": "2026-06-22T17:45:12Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150324, "created_time_dt": "2026-06-22T17:45:24Z", "desc": "Compliance test scenario: Verify data read operations are logged with identity and timestamp", "title": "Verify data read operations are logged with identity and timestamp", "types": [], "uid": "ccc-test-1414-1782150324" }, "message": "Verify data read operations are logged with identity and timestamp", "metadata": { "event_code": "Verify data read operations are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Medium", "severity_id": 3, "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Read Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-read\", and \"{20}\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: Log Analytics workspace query: POST https://api.loganalytics.io/v1/workspaces/433b7b84-1ba6-4f5c-8375-6d2016f07e6a/query\n--------------------------------------------------------------------------------\nRESPONSE 403: 403 Forbidden\nERROR CODE: InsufficientAccessError\n--------------------------------------------------------------------------------\n{\n \"error\": {\n \"message\": \"The provided credentials have insufficient access to perform the requested operation\",\n \"code\": \"InsufficientAccessError\",\n \"correlationId\": \"750f103e-018e-4261-a965-9a4af0f77101\",\n \"innererror\": {\n \"code\": \"NspValidationFailedError\",\n \"message\": \"Access to workspace 'avmlaw20260616' from '52.159.226.1' is denied. To allow access from public networks, change the workspace Networking settings or add it to a Network Security Perimeter. (workspace resource ID: /subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/microsoft.operationalinsights/workspaces/avmlaw20260616) Please contact your administrator.\"\n }\n }\n}\n--------------------------------------------------------------------------------\n\n⊘ I refer to \"{result}\" as \"readLogs\" (skipped)\n⊘ I attach \"{readLogs}\" to the test output as \"Data Read Logs\" (skipped)\n⊘ \"{readLogs}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "time": 1782150324, "time_dt": "2026-06-22T17:45:24Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR03" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150334, "created_time_dt": "2026-06-22T17:45:34Z", "desc": "Compliance test scenario: Service prevents data read by user with no access", "title": "Service prevents data read by user with no access", "types": [], "uid": "ccc-test-1442-1782150334" }, "message": "Service prevents data read by user with no access", "metadata": { "event_code": "Service prevents data read by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"{service-type}\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userReadableService\"\n✓ I call \"{userReadableService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-trigger-data-read-error.txt\"", "status_id": 1, "time": 1782150334, "time_dt": "2026-06-22T17:45:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR06" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150334, "created_time_dt": "2026-06-22T17:45:34Z", "desc": "Compliance test scenario: Enumeration event publishing cannot be tested automatically - NotTestable", "title": "Enumeration event publishing cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-1459-1782150334" }, "message": "Enumeration event publishing cannot be tested automatically - NotTestable", "metadata": { "event_code": "Enumeration event publishing cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1782150334, "time_dt": "2026-06-22T17:45:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR01" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150334, "created_time_dt": "2026-06-22T17:45:34Z", "desc": "Compliance test scenario: Enumeration logging cannot be verified automatically - NotTestable", "title": "Enumeration logging cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-1478-1782150334" }, "message": "Enumeration logging cannot be verified automatically - NotTestable", "metadata": { "event_code": "Enumeration logging cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1782150334, "time_dt": "2026-06-22T17:45:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR02" ] } } }, { "activity_id": 1, "activity_name": "Test", "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "finding_info": { "created_time": 1782150334, "created_time_dt": "2026-06-22T17:45:34Z", "desc": "Compliance test scenario: Replication destination trust cannot be verified automatically - NotTestable", "title": "Replication destination trust cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-1496-1782150334" }, "message": "Replication destination trust cannot be verified automatically - NotTestable", "metadata": { "event_code": "Replication destination trust cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN10", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "resources": [ { "cloud_partition": "azure", "data": { "details": " service on :", "metadata": { "findings": [], "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "status": "ACTIVE", "tags": [], "type": "object-storage" } }, "group": { "name": "object-storage" }, "name": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616", "region": "westus2", "type": "object-storage", "uid": "/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/avm-testing/providers/Microsoft.Storage/storageAccounts/avmstor20260616" } ], "severity": "Informational", "severity_id": 1, "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "time": 1782150334, "time_dt": "2026-06-22T17:45:34Z", "type_name": "Compliance Finding: Test", "type_uid": 200401, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN10.AR01" ] } } } ]