turbot/aws_compliance

Control: S3 buckets static website hosting should be disabled

Description

Enabling static website on a S3 bucket requires to grant public read access to the bucket. There is a potential risk of exposure when you turn off block public access settings to make your bucket public. This is recommend to not configure static website on S3 bucket.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.s3_bucket_static_website_hosting_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.s3_bucket_static_website_hosting_disabled --share

SQL

This control uses a named query:

s3_bucket_static_website_hosting_disabled

Tags