hard20 pts · first answer countscloud-securityaws-iam
Is this S3 bucket public?
A scanner flags Principal "*" in this S3 bucket policy as "public". Is that correct?
{
"Effect": "Allow",
"Principal": "*",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::reports-bucket/*",
"Condition": {
"StringEquals": { "aws:SourceVpce": "vpce-0a1b2c3d4e5f67890" }
}
}Discussion 0
Join free to post in the discussion.
Related questions
- CloudTrail logging was stoppedCybersecurity Analyst
- SSRF and cloud instance metadataCybersecurity Analyst
- Hidden escalation with PassRoleCybersecurity Analyst
- Cloud access from PodsDevOps Engineer
- Who patches the VM operating system?Cloud Engineer
- Principle of least privilegeCloud Engineer
- Protecting the root userCloud Engineer
- What HTTPS protectsCloud Engineer