High
S3
S3 general purpose buckets should block public access
CISNISTISO 27001HIPAA
Description
Ensures Block Public Access settings are enabled at the individual S3 bucket level.
Remediation
Enable S3 Block Public Access at the bucket level.
Steps
- Sign in to the AWS Management Console and open the Amazon S3 console.
- Choose the bucket and select the 'Permissions' tab.
- In 'Block Public Access (bucket settings)', click 'Edit'.
- Enable all four block public access settings.
- Save changes.
Compliance
CISNISTISO 27001HIPAA