Ensure S3 buckets should not grant any external privileges via ACL
Description
In order to protect your S3 data from loss and unauthorized access ensure there aren’t any publicly accessible S3 buckets available in your AWS account. A publicly accessible S3 bucket allows full control access to everyone (i.e. anonymous users) to List (Read) the objects within the bucket, Upload/Delete (Write) objects, Read bucket permissions and Write bucket permissions.
Remediation
Perform the following to remove any public access that has been granted to the bucket via an ACL or S3 bucket policy: