Low
S3
S3 general purpose buckets should have MFA delete enabled
CIS v5.0.0CIS v3.0.0NIST 800-53
Description
Verifies that MFA delete is enabled for S3 general purpose buckets, requiring multi-factor authentication for object deletion.
Remediation
Enable MFA delete on S3 buckets with versioning enabled.
Steps
- Open the Amazon S3 console.
- Select the bucket and go to 'Properties' > 'Bucket Versioning'.
- Enable versioning if not already enabled.
- Enable MFA delete (requires MFA device).
Compliance
CIS v5.0.0CIS v3.0.0NIST 800-53