Policy Packs

guardrails-samples

Ensure that only authorized users and services have access to your data.

Enforce Trusted Access for ACLs on AWS S3 Buckets

main

aws_s3_bucket_acl_trusted_access

Manage trusted access for AWS S3 Buckets via Bucket ACLs.&#92;n&#92;nAWS allows S3 Buckets to be shared with other AWS accounts via ACLs.  This policy allows you to configure whether such sharing is allowed, and to which principals.&#92;n&#92;nIf set to `Enforce: Revoke untrusted access`, access to non-trusted entities will be removed.&#92;n

bucketAclTrustedAccess

AWS > S3 > Bucket > ACL > Trusted Access

aws_s3_bucket_acl_trusted_canonical_ids

List of AWS Canonical User IDs that are trusted for cross-account&#92;naccess in the AWS S3 Bucket ACL.&#92;n&#92;nThe `*` wildcard `allows` any Canonical User ID grantee, and is not recommended.&#92;n&#92;nThe `[]` empty array `denies` any Canonical User ID grantee.&#92;n

bucketAclTrustedCanonicalIds

AWS > S3 > Bucket > ACL > Trusted Access > Canonical IDs

aws_s3_bucket_acl_trusted_groups

List of predefined AWS Groups that are trusted for cross-account access in the AWS S3 Bucket ACL.&#92;n

bucketAclTrustedGroups

AWS > S3 > Bucket > ACL > Trusted Access > Groups

turbot_policy_setting.aws_s3_bucket_acl_trusted_access

turbot_policy_setting.aws_s3_bucket_acl_trusted_canonical_ids

turbot_policy_setting.aws_s3_bucket_acl_trusted_groups

Policy	Setting	Note
AWS > S3 > Bucket > ACL > Trusted Access	Check: Trusted Access
AWS > S3 > Bucket > ACL > Trusted Access > Canonical IDs	- "1111222233334444555566667777888899990000abcd88889999008888999900" - "1111222233334444555566667777888899990000wxyz88889999008888999900"
AWS > S3 > Bucket > ACL > Trusted Access > Groups	- AuthenticatedUsers - LogDelivery

Policy Settings