🟠 High | Source: AWS Security Blog
Misconfigured Amazon S3 buckets with overly permissive policies or ACLs are a common cause of unintended data exposure in AWS environments. This AWS Security Blog post walks through how to identify buckets with excessive access permissions and provides remediation guidance. Left unchecked, such misconfigurations can lead to unauthorised access to sensitive data at scale.
Security Architect’s Take: Run a targeted audit of S3 bucket policies and ACLs using AWS Config rules such as ‘s3-bucket-public-read-prohibited’ and Amazon Macie to surface over-permissioned buckets, then enforce S3 Block Public Access at the account and organisation level as a preventive control.
Original advisory: Securing your Amazon S3 buckets: Identifying and remediating over-permissioned access