Free Assessment

Amazon_S3_19

Ensure S3 bucket CloudTrail logs ACL should not allow public access

Description

CloudTrail logs a record of every API call made in your AWS account. These logs file are stored in an S3 bucket. It is recommended that the bucket policy or access control list (ACL) applied to the S3 bucket that CloudTrail logs to prevents public access to the CloudTrail logs.

Remediation

Perform the following to remove public access for your cloudtrail S3 bucket

  1. Sign in to the AWS Management Console.
  2. Navigate to S3 dashboard at https://console.aws.amazon.com/s3/.
  3. Select the S3 bucket that you want to examine and click the Properties tab from the S3 dashboard.
  4. In the&nbsp

Service

S3

Severity

Low

Compliance

Mapping

Start Free Trial
Login

CLOSE

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!

Learn More