S3 access point disables a Block Public Access setting

What it checks

S3 access point disables a Block Public Access setting

Where it applies

Terraform: aws_s3_access_point

CloudFormation: AWS::S3::AccessPoint

How to fix it

1. Set every public_access_block_configuration flag to true (the default), or remove the block entirely to inherit the secure defaults. Access-point BPA cannot be changed after creation, so recreate the access point if needed.

Frameworks

• AWS FSBP S3.1
• SOC 2 CC6.1
• SOC 2 CC6.6
• PCI-DSS v4.0.1/1.4.4
• HIPAA 164.312(a)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules