Control: 8 S3 Block Public Access setting should be enabled at the bucket level
Description
This control checks whether S3 buckets have bucket-level public access blocks applied. This control fails if any bucket level public access settings are set to false.
Block Public Access at the S3 bucket level provides controls to ensure that objects never have public access. Public access is granted to buckets and objects through access control lists (ACLs), bucket policies, or both.
Remediation
For information on how to remove public access at a bucket level, see Blocking public access to your Amazon S3 storage.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_s3_8Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_s3_8 --shareSQL
This control uses a named query:
s3_public_access_block_bucket