CCC Object Storage Capabilities Catalog
This page renders the FINOS Common Cloud Controls Object Storage capabilities as
a Gemara CapabilityCatalog, including the shared CCC
Core capabilities this service catalog imports. Native Object Storage entries
and imported Core entries appear together, grouped by capability domain.
For the companion catalogs, see the Threats Catalog and Controls Catalog.
Data
Data storage, lifecycle, and durability capabilities.
CCC.ObjStor.CP01Storage Buckets
Provides uniquely identifiable segmentations in which data elements may be stored.
CCC.ObjStor.CP02Storage Objects
Supports storing, accessing, and managing data elements which contain both data and metadata.
CCC.ObjStor.CP05Store New Objects
Supports for storing a new object in the bucket.
CCC.ObjStor.CP06Replace Stored Objects
Supports for replacing an object in the bucket with a new object for the same key.
CCC.ObjStor.CP07Delete Stored Objects
Supports for deleting objects from the bucket given the object key.
CCC.ObjStor.CP09Object Modification Locks
Allows locking of objects to disable modification and/or deletion of an object for a defined period of time.
CCC.ObjStor.CP11Querying
Supports performing simple select queries to retrieve only a subset of objects from the bucket.
CCC.Core.CP08Data Replicationimported
Imported from CCC.Core.CP
The service automatically replicates data across multiple deployments simultaneously with parity, or may be configured to do so.
CCC.Core.CP18Resource Versioningimported
Imported from CCC.Core.CP
The service automatically assigns versions to child resources which can be used to preserve, retrieve, and restore past iterations.
CCC.Core.CP22Location Lock-Inimported
Imported from CCC.Core.CP
The service may be configured to restrict the deployment of child resources to specific geographic locations.
Resource
Capacity, classes, and resource management.
CCC.ObjStor.CP03Bucket Capacity Limit
Provides the ability to set a maximum total capacity for objects within a bucket.
CCC.ObjStor.CP04Object Size Limit
Supports setting a maximum object size for storing objects.
CCC.ObjStor.CP08Lifecycle Policies
Supports defining policies to automate data management tasks, especially those related to cost management.
CCC.ObjStor.CP12Storage Classes
Provides different storage classes for frequently and infrequently accessed objects.
CCC.Core.CP04Transaction Rate Limitsimported
Imported from CCC.Core.CP
The service can throttle, delay, or reject excess requests when transactions exceed a user-specified rate limit, and always provides industry-standard throughput up to that limit.
CCC.Core.CP15Cost Managementimported
Imported from CCC.Core.CP
The service monitors data published by child or networked resources to infer usage patterns and generate cost reports for the service.
CCC.Core.CP16Budgetingimported
Imported from CCC.Core.CP
The service may be configured to take a user-specified action when a spending threshold is met or exceeded on a child or networked resource.
CCC.Core.CP20Resource Taggingimported
Imported from CCC.Core.CP
The service provides users with the ability to tag a child resource with metadata that can be reviewed or queried.
Access
Access control and public exposure boundaries.
CCC.ObjStor.CP10Object Level Access Control
Supports controlling access to specific objects within the object store.
CCC.ObjStor.CP13Public Access Block
Supports configuring a default block on all public access to buckets and objects, preventing any policy or ACL from granting unauthenticated or anonymous access.
CCC.Core.CP05Signed URLsimported
Imported from CCC.Core.CP
The service can generate an ad hoc URL containing authentication information to enforce user-configured permissions for accessing a specific component or a child resource.
CCC.Core.CP06Access Controlimported
Imported from CCC.Core.CP
The service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes.
Encryption
The Encryption group covers entries related to protecting data confidentiality and integrity through cryptographic mechanisms. This includes encryption in transit and at rest, key management, and certificate lifecycle management.
CCC.Core.CP01Encryption in Transit Enabled by Defaultimported
Imported from CCC.Core.CP
The service automatically encrypts all data using industry-standard cryptographic protocols prior to transmission via a network interface.
CCC.Core.CP02Encryption at Rest Enabled by Defaultimported
Imported from CCC.Core.CP
The service automatically encrypts all data using industry-standard cryptographic protocols prior to being written to a storage medium.
Observability
The Observability group covers entries related to logging, monitoring, metrics, alerting, and event publication. This includes audit trail integrity, enumeration detection, and protection against tampering or unauthorized access to operational telemetry.
CCC.Core.CP03Access Log Publicationimported
Imported from CCC.Core.CP
The service automatically publishes structured, verbose records of activities performed within the scope of the service by external actors.
CCC.Core.CP07Event Publicationimported
Imported from CCC.Core.CP
The service automatically publishes a structured state-change record upon creation, deletion, or modification of data, configuration, components, or child resources.
CCC.Core.CP09Metrics Publicationimported
Imported from CCC.Core.CP
The service automatically publishes structured, numeric, time-series data points related to the performance, availability, and health of the service or its child resources.
Compute
The Compute group covers entries related to processing, execution, and runtime infrastructure. This includes CPU, memory, storage allocation, network ports, command-line interfaces, and elastic scaling.
CCC.Core.CP14API Accessimported
Imported from CCC.Core.CP
The service exposes a port enabling external actors to interact programmatically with the service and its resources using HTTP protocol methods such as GET, POST, PUT, and DELETE.
CCC.Core.CP28Command-line Interfaceimported
Imported from CCC.Core.CP
The service includes a component that reads and translates text into commands that can be executed by the service.
Ingestion
The Ingestion group covers entries related to how a service receives or retrieves data, inputs, or commands for processing. This includes both active (pull-based) and passive (push-based) ingestion patterns.
CCC.Core.CP29Active Ingestionimported
Imported from CCC.Core.CP
While running, the service itself can fetch or reach out to some other service or external source to get data, inputs or commands for the service to process or operate on.
CCC.Core.CP30Passive Ingestionimported
Imported from CCC.Core.CP
While running, the service can pause, idle or wait to receive inputs, commands, or data from some other service or external source for the service to process or operate on.