S3 bucket should have Block Public Access enabled

What it checks

S3 bucket: at least one Block Public Access flag is disabled.

Where it applies

Terraform: aws_s3_bucket_public_access_block

CloudFormation: AWS::S3::Bucket

How to fix it

1. Set block_public_acls, block_public_policy, ignore_public_acls and restrict_public_buckets all to true on the aws_s3_bucket_public_access_block resource
2. Run terraform apply and verify via aws s3api get-public-access-block

Frameworks

• AWS FSBP S3.1
• SOC 2 CC6.1
• SOC 2 CC6.6
• SOC 2 CC6.3
• PCI-DSS v4.0.1/1.4.4
• HIPAA 164.312(a)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules