Checks whether each origin domain name is in the Object Storage Service (OSS) domain name format when the Origin Info parameter of the origin domain name is set to OSS Domain. If so, the evaluation result is Compliant.
Scenarios
This rule applies when you need to use OSS origin domain name. If you want to use
an OSS origin domain name, you must set the Origin Info parameter of the OSS origin
domain name to OSS Domain. This way, OSS identifies the back-to-origin traffic that is received from Alibaba
Cloud CDN as CDN back-to-origin outbound traffic. You can obtain a discounted price for the outbound traffic.
Note OSS domain names must end with
aliyuncs.comor aliyun-inc.com.
Risk level
Default risk level: high.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
- If each origin domain name is in the OSS domain name format when the Origin Info parameter of the origin domain name is set to OSS domain, the evaluation result is Compliant.
- If a origin domain name is not in the OSS domain name format when the Origin Info parameter of the origin domain name is set to OSS domain, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see Incompliance remediation.
Rule details
| Item | Description |
|---|---|
| Rule name | cdn-domain-oss-source-check |
| Rule identifier | cdn-domain-oss-source-check |
| Tag | CDN and Domain |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | Domain name |
| Input parameter | None. |
Incompliance remediation
If you set the Origin Info parameter of a origin domain name to OSS Domain, specify the origin domain name in the OSS domain name format. For more information, see Add a domain name.