Policy Packs

guardrails-samples

Prevent unintended exposure of sensitive data to the public internet for S3 buckets.

Enforce Block Public Access Is Enabled for AWS S3 Buckets

main

aws_s3_bucket_public_access_block

Configure the AWS S3 buckets Bucket Level Public Access Block

s3BucketPublicAccessBlock

AWS > S3 > Bucket > Public Access Block

aws_s3_bucket_public_access_block_settings

Define the Public Access Block that can be used to restrict the bucket access. This policy provides a default for Public Access Block in AWS S3 Bucket, however you can explicitly override the setting.&#92;n&#92;n**Block Public ACLs:** Block public access to buckets and objects granted through new access control lists (ACLs).&lt;br/&gt;&#92;n**Block Public Bucket Policies:** Block public access to buckets and objects granted through new public bucket or access point policies.&lt;br/&gt;&#92;n**Ignore Public ACLs:** Block public access to buckets and objects granted through any access control lists (ACLs).&lt;br/&gt;&#92;n**Restrict Public Bucket Policies:** Block public and cross-account access to buckets and objects through any public bucket or access point policies.&lt;br/&gt;&#92;n&#92;n

s3BucketPublicAccessBlockSettings

AWS > S3 > Bucket > Public Access Block > Settings

turbot_policy_setting.aws_s3_bucket_public_access_block

turbot_policy_setting.aws_s3_bucket_public_access_block_settings

Policy	Setting	Note
AWS > S3 > Bucket > Public Access Block	Check: Per `Public Access Block > Settings`
AWS > S3 > Bucket > Public Access Block > Settings	- "Block Public ACLs" - "Block Public Bucket Policies" - "Ignore Public ACLs" - "Restrict Public Bucket Policies"

Policy Settings