All checks
Medium
S3 general purpose buckets should have event notifications enabled
Checks that the S3 general purpose bucket sends event notifications to Amazon EventBridge, an SNS topic, an SQS queue or a Lambda function, so changes such as object removal can alert your team to accidental or unauthorized modification.
- service
- S3
- severity
- Medium
- scope
- evaluated once per account
How to fix it
In the console
S3 → the bucket → Properties → Event Notifications
With the AWS CLI
aws s3api put-bucket-notification-configuration --bucket <bucket-name> --notification-configuration file://notification.jsonWith Terraform
resource "aws_s3_bucket_notification" "this" {
bucket = var.bucket_name
eventbridge = true
}See which of your accounts this check is failing on.
Book a demo