Data at risk

S3 Bucket Allows Authenticated READ_ACP Access

Risk Level

Hazardous (3)



Ensure that your S3 buckets content permissions cannot be viewed by AWS authenticated accounts or IAM users in order to protect against unauthorized access. An S3 bucket that grants READ_ACP (view permissions) access to AWS signed users can allow them to examine your S3 Access Control Lists (ACLs) configuration details and find permission vulnerabilities
  • Recommended Mitigation

    Change the {AwsS3Bucket} bucket policy to block authenticated READ_ACP access