AWS S3 Bucket has an ACL defined which allows public WRITE access misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_57
Category - Subcategory	Storage - Permissions
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

S3 Bucket has an ACL defined which allows public WRITE access.

How to Fix

Resource: AWS::S3::Bucket

• Arguments: Properties.AccessControl

[source,go]

Type: AWS::S3::Bucket Properties: ...

• AccessControl: PublicReadWrite

---