Medium
S3
S3 general purpose buckets should have Object Lock enabled
NISTHIPAA
Description
Checks if S3 buckets are configured to use Object Lock.
Remediation
To configure Object Lock for an S3 bucket, follow these steps:
Steps
- Sign in to the AWS Management Console and open the Amazon S3 console.
- In the Buckets list, choose the name of the bucket you want to enable Object Lock for.
- Choose the 'Properties' tab.
- In the 'Object Lock' section, choose 'Edit'.
- Select 'Enable Object Lock'. Note that once Object Lock is enabled for a bucket, it cannot be disabled.
- Choose the default retention mode and period for new objects placed in the bucket. You can choose between 'Governance' mode (users can't overwrite or delete an object version or alter its lock settings unless they have special permissions) or 'Compliance' mode (the protected version can't be overwritten or deleted by any user, including the root user).
- Click 'Save changes'.
- Apply Object Lock configuration to the objects in the bucket as needed.
Compliance
NISTHIPAA