High S3

S3 general purpose buckets should block public access

CISNISTISO 27001HIPAA

Description

Ensures Block Public Access settings are enabled at the individual S3 bucket level.


Remediation

Enable S3 Block Public Access at the bucket level.

Steps

  1. Sign in to the AWS Management Console and open the Amazon S3 console.
  2. Choose the bucket and select the 'Permissions' tab.
  3. In 'Block Public Access (bucket settings)', click 'Edit'.
  4. Enable all four block public access settings.
  5. Save changes.

Compliance

CISNISTISO 27001HIPAA