No Public Buckets | Vulnerability Database

S3 Access block should restrict public bucket to limit access

S3 buckets should restrict public policies for the bucket. By enabling, the restrict_public_buckets, only the bucket owner and AWS Services can access if it has a public policy.

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Limit the access to public buckets to only the owner or AWS Services (eg; CloudFront)

1
2
3
4
5
6
7
8
9


Resources:
  GoodExample:
    Type: AWS::S3::Bucket
    Properties:
      PublicAccessBlockConfiguration:
        BlockPublicAcls: true
        BlockPublicPolicy: true
        IgnorePublicAcls: true
        RestrictPublicBuckets: true

Limit the access to public buckets to only the owner or AWS Services (eg; CloudFront)

1
2
3
4
5
6
7
8
9


resource "aws_s3_bucket" "example" {
  bucket = "bucket"
}

resource "aws_s3_bucket_public_access_block" "good_example" {
  bucket = aws_s3_bucket.example.id

  restrict_public_buckets = true
}

Remediation Links

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#restrict_public_buckets¡