Your Amazon S3 access points have all four public access block settings enabled. S3 access points provide…
Your AWS account has S3 Block Public Access settings enabled at the account level. These settings act as a…
Amazon S3 buckets have Access Control Lists (ACLs) disabled by setting Object Ownership to "Bucket owner…
S3 buckets that have policies granting access to AWS accounts other than the bucket owner. Cross-account…
Amazon S3 buckets have cross-region replication (CRR) configured. Cross-region replication automatically…
Your Amazon S3 buckets have default server-side encryption enabled. When enabled, any new object uploaded…
Your Amazon S3 buckets have event notifications configured. Event notifications let you know when…
Amazon S3 buckets use server-side encryption with AWS Key Management Service (KMS) keys instead of the…
Your Amazon S3 buckets have Block Public Access settings enabled. Specifically, it looks for two settings:
Your S3 buckets have lifecycle configuration enabled. Lifecycle rules automatically manage your objects by…
Amazon S3 buckets that do not have MFA Delete protection enabled. MFA Delete adds a second layer of…
Your Amazon S3 buckets have Object Lock enabled. Object Lock applies Write-Once-Read-Many (WORM)…
Your Amazon S3 buckets have object versioning enabled. Versioning keeps multiple copies of each file in…
Your S3 bucket policies do not allow public write access. A bucket policy that grants write permissions to…
Your Amazon S3 buckets are not publicly accessible. It examines bucket ACLs (Access Control Lists), bucket…
Your S3 buckets are not publicly listable through Access Control Lists (ACLs). A bucket fails this check…
Your Amazon S3 buckets do not allow public write access through Access Control Lists (ACLs). When a bucket…
Your Amazon S3 buckets require encrypted (HTTPS) connections. Without this policy, data can be transferred…
Your Amazon S3 buckets have server access logging enabled. When enabled, S3 records every request made to…
S3 buckets with predictable names that could be hijacked by attackers before your organization uses them…
Amazon S3 Multi-Region Access Points (MRAPs) have all four Block Public Access settings enabled. MRAPs…