S3 Bucket does not have public access blocks

Description

When you create an S3 bucket, it is good practice to set the additional resource aws_s3_bucket_public_access_block to ensure the bucket is never accidentally public. We recommend you ensure S3 bucket has public access blocks. If the public access block is not attached it defaults to False.

Code Example

resource "aws_s3_bucket" "bucket_good_1" {
  bucket = "bucket_good"
}


+ resource "aws_s3_bucket_public_access_block" "access_good_1" {
+   bucket = aws_s3_bucket.bucket_good_1.id
+ 
+   block_public_acls   = true
+   block_public_policy = true
+ }

Remediation

Terraform

• Resource: aws_s3_bucket, aws_s3_bucket_public_access_block
• Arguments: block_public_acls and block_public_policy

Rule Details

Field	Value
ID	IAC-0445
Severity	LOW
IaC Type	Terraform
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV2_AWS_6

References

• Checkov Rule

---