Benchmark: S3

Usage

Browse dashboards and select S3:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.foundational_security_s3

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.foundational_security_s3

Controls

• 1 S3 Block Public Access setting should be enabled
• 2 S3 buckets should prohibit public read access
• 3 S3 buckets should prohibit public write access
• 4 S3 buckets should have server-side encryption enabled
• 5 S3 buckets should require requests to use Secure Socket Layer
• 6 Amazon S3 permissions granted to other AWS accounts in bucket policies should be restricted
• 8 S3 Block Public Access setting should be enabled at the bucket level
• 9 S3 bucket server access logging should be enabled
• 10 S3 buckets with versioning enabled should have lifecycle policies configured
• 11 S3 buckets should have event notifications enabled
• 12 S3 access control lists (ACLs) should not be used to manage user access to buckets
• 13 S3 buckets should have lifecycle policies configured

Tags