All checks
Medium
S3 general purpose buckets should require requests to use SSL
Checks that the S3 general purpose bucket's policy denies every request made without TLS, so data sent to or from the bucket cannot be read or altered in transit.
- service
- S3
- severity
- Medium
- scope
- evaluated once per account
How to fix it
In the console
S3 → the bucket → Permissions → Bucket policy
With the AWS CLI
aws s3api put-bucket-policy --bucket <bucket-name> --policy file://bucket-policy.jsonWith Terraform
resource "aws_s3_bucket_policy" "this" {
bucket = var.bucket_name
policy = data.aws_iam_policy_document.deny_insecure_transport.json
}See which of your accounts this check is failing on.
Book a demo