AWS S3 Bucket Not Publicly Writeable
Risk | Remediation Effort |
Critical | Low |
This policy validates that no S3 Buckets are publicly writeable. It is almost never the case that S3 buckets should be publicly writeable. Data in publicly writeable buckets is not safe, it may be deleted at any time by any person.
Remediation
To remediate this, modify the access policy of the S3 bucket to remove
AllUsers and AuthenticatedUsers from any grant that gives write permissions.Reference