Check S3 Bucket Level Public Access Block.
s3_bucket_level_public_access_block
Check S3 Bucket Level Public Access Block.
Risk
Public access policies may be applied to sensitive data buckets.
Run this check with Prowler CLI
prowler aws --checks s3_bucket_level_public_access_block
ARN template
arn:partition:s3:::bucket_name
Remediation
aws s3api put-public-access-block --region <REGION_NAME> --public-access-block-configuration BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true --bucket <BUCKET_NAME>
https://docs.prowler.com/checks/aws/s3-policies/bc_aws_s3_20#terraform
https://github.com/cloudmatos/matos/tree/master/remediations/aws/s3/s3/block-public-access
You can enable Public Access Block at the bucket level to prevent the exposure of your data stored in S3.
Source Code
References
Resource Type
AwsS3Bucket