IBM Cloud Object Storage bucket public access toggle enables without confirmation

Question

The goal is to determine whether an IBM Cloud Object Storage bucket can be accidentally made publicly accessible through the public access toggle without a mandatory confirmation step.

Available research indicates the bucket public access flag can be switched on without mandatory confirmation, creating an immediate exposure risk. This behavior requires current verification against documented IBM Cloud Object Storage behavior, and no confirmed error string or version scope is available from the supplied research.

Does enabling bucket public access require an explicit confirmation in the IBM Cloud console? Are there IAM or account-level controls that can block changes to the bucket public access flag? Does changing the public access flag generate an auditable event in IBM Cloud Activity Tracker?

Tasadduq Burney · Answer

Public Access Toggle Confirmation in IBM Cloud Object Storage
The direct answer is that the platform behavior regarding a mandatory confirmation prompt when toggling public access is dependent on the specific management interface utilized (e.g., Console versus API), and the research does not confirm a universal, mandatory confirmation step exists.

Confirmed Facts and Controls

Changes to the bucket public access status are generally recorded as auditable events within the IBM Cloud Activity Tracker.
Account-level or IAM policies can be implemented to restrict or block modifications to the public access flag, acting as a preventative control regardless of UI prompts.

Steps for Verification and Safety

Verify the behavior by attempting the toggle change within the IBM Cloud Console and closely observing for any modal confirmation dialog.
If using automation, execute the change via the official IBM Cloud API and immediately check the Activity Tracker for a corresponding audit log entry.
Review existing IAM policies applied at the account or resource level to ensure no preventative restrictions are in place.

To refine the recommendation, please confirm which management interface (Console, CLI, or API) was used when the toggle was enabled.

IBM Cloud Object Storage bucket public access toggle enables without confirmation