Policy Packs

guardrails-samples

Prevent unintended exposure of sensitive data to the public internet for S3 buckets.

Enforce Block Public Access Is Enabled for AWS S3 Buckets

main

aws_s3_bucket_public_access_block

Configure the AWS S3 buckets Bucket Level Public Access Block

s3BucketPublicAccessBlock

AWS > S3 > Bucket > Public Access Block

aws_s3_bucket_public_access_block_settings

Define the Public Access Block that can be used to restrict the bucket access. This policy provides a default for Public Access Block in AWS S3 Bucket, however you can explicitly override the setting.&#92;n&#92;n**Block Public ACLs:** Block public access to buckets and objects granted through new access control lists (ACLs).&lt;br/&gt;&#92;n**Block Public Bucket Policies:** Block public access to buckets and objects granted through new public bucket or access point policies.&lt;br/&gt;&#92;n**Ignore Public ACLs:** Block public access to buckets and objects granted through any access control lists (ACLs).&lt;br/&gt;&#92;n**Restrict Public Bucket Policies:** Block public and cross-account access to buckets and objects through any public bucket or access point policies.&lt;br/&gt;&#92;n&#92;n

Developers