storageS3 Bucket Help
If a bucket allows open access, determine if open access is truly needed. If not, update the bucket permissions to restrict access to the owner or specific users. The following issues may apply:
-
error
Global Write Access
Bucket permissions that grant Upload/Delete access create potential security vulnerabilities by allowing users that to add, modify, or remove items in a bucket!
Read more in the AWS docs
-
warning
ACL Allows List
Bucket permissions that grant List access can result in higher than expected charges if objects in the bucket are listed by unintended users at a high frequency.
Read more in the AWS docs
-
public
Policy Allows Access
A bucket is publicly accessible by either everyone in the world or by any authenticated AWS user, should this bucket be public?
Read more in the AWS docs
-
no_encryption
No Encryption
Server-side encryption is about data encryption at rest. When you use server-side encryption, Amazon S3 encrypts an object before saving it to disk and decrypts it when you download the object.
Read more in the AWS docs