AWS S3 buckets are accessible to any authenticated user misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC2_AWS_43
Category - Subcategory	IAM - Overly Permissive
Provider	AWS
Severity	MEDIUM
Framework	Terraform
Mapped CSPM/KSPM Rule	9c8333d7-0670-4422-8b8c-70cd8ef2701e

Impact

This rule identifies S3 buckets accessible to any authenticated AWS users. Amazon S3 allows customer to store and retrieve any type of content from anywhere in the web. Often, customers have legitimate reasons to expose the S3 bucket to public, for example to host website content. However, these buckets often contain highly sensitive enterprise data which if left accessible to anyone with valid AWS credentials, may result in sensitive data leaks.