IBM / cloud-pak-deployer

Configuration-based installation of OpenShift and Cloud Pak for Data/Integration/Watson AIOps on various private and public cloud infrastructure providers. Deployment attempts to achieve the end-state defined in the configuration. If something fails along the way, you only need to restart the process to continue the deployment.
https://ibm.github.io/cloud-pak-deployer/
Apache License 2.0
130 stars 65 forks source link

AWS S3 Bucket created with public access #642

Open techietav opened 4 months ago

techietav commented 4 months ago

When deploying CP4D into AWS and creating the openshift cluster an S3 bucket is created with public access. This violates the AWS client security enforcement policy and is immediately removed, as well as sending a security incident email to the account owner.

Expected behavior The bucket should have specific access credentials required and should never be created with public access.