Description

Ensure that your S3 buckets content permissions cannot be viewed by AWS authenticated accounts or IAM users in order to protect against unauthorized access. An S3 bucket that grants READ_ACP (view permissions) access to AWS signed users can allow them to examine your S3 Access Control Lists (ACLs) configuration details and find permission vulnerabilities

• 

  Recommended Mitigation

  Change the {AwsS3Bucket} bucket policy to block authenticated READ_ACP access