Other Articles

EC2 Volume – Enable EBS Encryption
EC2 Volume – Enable EBS Volume Backup
EFS – Enable EFS Storage Backup
EC2 Instance – Enable Deletion Protection
EC2 Instance – Monitor CPU Utilization
ECS Service – Monitor CPU Utilization
ECS Service – Monitor Memory Utilization
EC2 VPC – Ensure Flow Logs are Enabled
S3 Bucket – Enable S3 Bucket Versioning
S3 Bucket – Enable S3 Bucket Encryption
RDS DB Instance – Enable Auto Minor Version Upgrade
RDS DB Instance – Block Public Access
RDS DB Instance – Monitor Free Storage Space
RDS DB Instance – Monitor CPU Utilization
RDS DB Instance – Encryption of Storage
RDS DB Instance – Enable Deletion Protection
SQS Queue – Monitor Message Age
SQS Queue – Monitor Message Visibility
DynamoDB Table – Enable Table Encryption
DynamoDB Table – Enable Table Point In Time Recovery
DynamoDB Table – Enable Table Deletion Protection
DynamoDB Table – Monitor Table Read Capacity
DynamoDB Table – Monitor Table Write Capacity
DynamoDB Table – Monitor Table Latency
Enable User MFA
Enforce Key Rotation
Enforce Active Key Limit
Disable Unused User Credentials
Enforce Group Permission
Enable CloudTrail
Enable AWS Security Hub
Enforce Password Length
Prohibit Password Reuse
Purge Expired Certificates
Check Root Access Keys Existence
Enable Root MFA
Establish Support Role
Enable Key Rotation
Encrypt CloudTrail Logs
Enable GuardDuty

S3 Bucket – Block S3 Bucket Public Access

This check ensures that public access is blocked on S3 buckets to prevent unauthorized data exposure.

Check Details

Resource: S3 Bucket
Check: Block S3 bucket public access
Risk: Sensitive data may be exposed to the public

Remediation via AWS Console

Log in to the AWS Management Console and open the Amazon S3 console.
Select the S3 bucket.
Open the Permissions tab.
Under Block public access (bucket settings), click Edit.
Enable Block all public access and click Save changes.

Remediation via AWS CLI

Log in to the AWS Management Console and click the CloudShell icon (>_) in the top-right corner.
List all S3 buckets:
```
aws s3 ls
```

Enable block public access for a specific bucket:



aws s3api put-public-access-block \
 --bucket <bucket-name> \
 --public-access-block-configuration \
 BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true