Suspicious activity
S3 Bucket with Policy:S3/BucketBlockPublicAccessDisabled GuardDuty Alert Found
Risk Level
Informational (4)
Platform(s)
Non-platform specific
Compliance Frameworks
Brazilian General Data Protection (LGPD), CCM-CSA, CCPA, cis_8, CPRA, GDPR, HITRUST, ISO 27701, ISO/IEC 27001, Mitre ATT&CK, New Zealand Information Security Manual, NIST 800-171, NIST 800-53, PDPA, UK Cyber Essentials
Description
GuardDuty finding was triggered for s3 bucket. It was found that the 'BucketBlockPublicAccessDisabled' feature was disabled for {AwsS3Bucket} bucket. This feature prevents the bucket from being publicly accessible. By disabling it, one protection level is removed and the access is limited only by the access controls and policies applied to the bucket.-
Recommended Mitigation
It is recommended to restrict the access to the bucket by blocking public access and review additional alerts on the asset.
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.