How to resolve Sprinto check for blocking public access on AWS S3 buckets

About:

Sprinto check: AWS S3 bucket public access should be blocked

The above-mentioned Sprinto check verifies that the Block Public Access feature is enabled for your Amazon S3 buckets. This feature provides an additional layer of security by blocking public access to S3 buckets and objects, preventing unauthorized access or data exposure.

Purpose:

The purpose of this check is to enforce a secure configuration for your Amazon S3 buckets by ensuring that public access is blocked by default. By enabling the Block Public Access feature, you can mitigate the risk of unintended data exposure or unauthorized access to your S3 data. This feature helps you maintain data privacy and confidentiality, even if bucket or object permissions are misconfigured or accidentally modified.

How to fix this check:

Follow the below steps to resolve this check:

Before you begin

• Ensure you have the administrator privilege to manage Amazon S3 bucket configurations.

Enabling Block Public Access

1. Log in to AWS console using your credentials.

2. Navigate to the AWS S3 service.

3. Select the S3 bucket from the buckets list.

   
4. Select the Permissions tab, and ensure the Block public access is enabled.

   
5. If the Block all public access status doesn’t reflect On, click Edit from the section.

6. Select Block all public access and click Save changes.

   
7. Repeat the above steps and ensure public access is blocked for every AWS S3 buckets from your account.

Sprinto will detect the configuration change and set the related Sprinto check's status to "Passing.”

Contact Sprinto support if you have any queries related to the check or need assistance.