Skip to content
RED SAGSkills
hard20 pts · first answer countscloud-securityaws-iam

Is this S3 bucket public?

A scanner flags Principal "*" in this S3 bucket policy as "public". Is that correct?

{
  "Effect": "Allow",
  "Principal": "*",
  "Action": "s3:GetObject",
  "Resource": "arn:aws:s3:::reports-bucket/*",
  "Condition": {
    "StringEquals": { "aws:SourceVpce": "vpce-0a1b2c3d4e5f67890" }
  }
}
Choose one answer

Discussion 0

Join free to post in the discussion.

Related questions