All checks
High
S3 Multi-Region Access Points should have block public access settings enabled
Checks that an S3 Multi-Region Access Point has all four Block Public Access settings on. S3 combines them with the account's and each bucket's settings and applies the most restrictive, so with them on, this access point cannot make its buckets public.
- service
- S3
- severity
- High
- scope
- evaluated once per account
How to fix it
In the console
S3 → Multi-Region Access Points → Create Multi-Region Access Point
With Terraform
resource "aws_s3control_multi_region_access_point" "this" {
details {
name = "example"
public_access_block {
block_public_acls = true
block_public_policy = true
ignore_public_acls = true
restrict_public_buckets = true
}
region {
bucket = aws_s3_bucket.this.id
}
}
}See which of your accounts this check is failing on.
Book a demo