AWS S3 Object Versioning is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_21
Category - Subcategory	Storage - Versioning
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	8ec3f878-0f5e-4782-b4cd-98018b217be5

Impact

This rule identifies the S3 buckets which have Object Versioning disabled. S3 Object Versioning is an important capability in protecting your data within a bucket. Once you enable Object Versioning, you cannot remove it; you can suspend Object Versioning at any time on a bucket if you do not wish for it to persist. It is recommended to enable Object Versioning on S3.

How to Fix

To fix this issue, ensure that the VersioningConfiguration property in the AWS::S3::Bucket resource is configured with Status set to Enabled.

Example: [source,go]

Resources: MyS3Bucket: Type: AWS::S3::Bucket Properties: BucketName: example-bucket VersioningConfiguration: Status: Enabled ...