S3 Bucket Policy allows cross account access

Data at risk

S3 Bucket Policy allows cross account access

Risk Level

Informational (4)

Platform(s)

Compliance Frameworks

AWS Foundational Security Best Practices Controls
HITRUST
NIST 800-53

Description

Amazon S3 (Simple Storage Service) is a service that provides object storage from anywhere in the world through the AWS service interface. The object are stored in containers called buckets. We have detected that the S3 Bucket {AwsS3Bucket} contains a policy that allows cross account access to the following AWS accounts: [{AwsS3Bucket.CrossAccountFindings}]. Unauthorized access to a bucket can lead to abuse of the S3 service such as reading, deleting and altering the data stored in the bucket.

Recommended Mitigation

It is recommended to set the bucket's policy to provide access to trusted AWS accounts only. To configure the bucket's policy, follow the steps at: https://docs.aws.amazon.com/AmazonS3/latest/userguide/add-bucket-policy.html

S3 Bucket Policy allows cross account access

Description

Need help?