S3 lifecycle configuration does not set a period for aborting failed uploads misconfiguration detect

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_300
Category - Subcategory	Storage - Backups
Provider	AWS
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

This rule is verifying that there is a specified time period set for aborting failed uploads in the Amazon S3 lifecycle configuration. This is critical for preventing incomplete multipart uploads from consuming unnecessary storage, which could increase costs and potentially slow down system performance. If a multipart upload event fails, without a specified abort period, the partially uploaded data will continue to occupy space and accumulate associated charges.

How to Fix

Resource: aws_s3_bucket_lifecycle_configuration

• Arguments: abort_incomplete_multipart_upload

To achieve this, you need to add the abort_incomplete_multipart_upload attribute. [source,go]

resource "aws_s3_bucket_lifecycle_configuration" "pass" { bucket = aws_s3_bucket.bucket.id

rule {

• abort_incomplete_multipart_upload {
• days_after_initiation = 7
• } filter {} id = "log" status = "Enabled" } }

---