Data protection

S3 Glacier vault with public access

Platform(s)
Compliance Frameworks

Brazilian General Data Protection (LGPD), CCPA, CPRA, Data Security Posture Management (DSPM) Best Practices, ISO 27701, iso_27001_2022, iso_27002_2022, Mitre ATT&CK, NIST 800-171, NIST 800-53, Orca Best Practices, PDPA, UK Cyber Essentials

Description

Amazon S3 Glacier is a secure, durable, and extremely low-cost Amazon S3 storage class for data archiving and long-term backup. We have detected that the S3 Glacier vault {AwsS3GlacierVault}'s access policy allows public access. Public access to a vault allows access to all AWS accounts and users. Use the vault's access policy in order to restrict who can access it.