| CCC.ObjStor.TH01 | Data Exfiltration via Insecure Lifecycle Policies | Misconfigured lifecycle policies may unintentionally allow data to be exfiltrated or destroyed prematurely, resulting in a loss of availability and potential exposure of sensitive data. | 1 | 1 | 1 |
| CCC.ObjStor.TH02 | Pre-Signed URL Abuse | Pre-signed URLs generated with excessive permissions, overly long expiry durations, or insufficient scope constraints may be leaked or shared beyond their intended audience. Because the URL itself acts as a bearer credential, any entity in possession of the URL can access the referenced resource without further authentication, bypassing standard access controls. | 0 | 1 | 1 |
| CCC.ObjStor.TH03 | Storage Class Downgrade Leading to Durability or Availability Loss | An authorized entity or misconfigured lifecycle policy may transition objects from a high-durability or high-availability storage class to a lower-durability or single-zone class. This degradation manifests only when a subsequent failure occurs (e.g., availability zone outage). Objects may also be transitioned to archival tiers, rendering them effectively inaccessible for extended retrieval periods during incidents. | 0 | 1 | 1 |