AWS S3 bucket IgnorePublicAcls is not set to True misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_55
Category - Subcategory	Storage - Permissions
Provider	AWS
Severity	MEDIUM
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

The IgnorePublicAcls setting causes S3 to ignore all public ACLs on a bucket and any objects that it contains. Enabling this setting does not affect the persistence of any existing ACLs and does not prevent new public ACLs from being set. This setting will block public access granted by ACLs while still allowing PUT Object calls that include a public ACL.

How to Fix

Resource: AWS::S3::Bucket

• Arguments: Properties.PublicAccessBlockConfiguration.IgnorePublicAcls [source,go]

---

Type: 'AWS::S3::Bucket' Properties: ... PublicAccessBlockConfiguration: ...

• IgnorePublicAcls: true

---