aws-samples / aws-iam-permissions-guardrails

AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/
https://aws-samples.github.io/aws-iam-permissions-guardrails/
Apache License 2.0
122 stars 42 forks source link

Ensure S3 access point VPC #50

Open 0xjjoyy opened 3 years ago

0xjjoyy commented 3 years ago

Use Case - Is your feature request related to a problem? Please describe. A clear and concise description of what the problem is.

Ensure that S3 access point uses VPC value only (not Internet)

Expected Outcome - Describe the solution you'd like A clear and concise description of what you want to happen.

      "s3:CreateAccessPoint",
      "s3:PutAccessPointPolicy"

      "arn:aws:s3:*:*:accesspoint/*"

s3:AccessPointNetworkOrigin=VPC

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Affected AWS resource Mention the AWS resources which is affected

Impact High: The issue makes a service level improvement which affects all users of AWS Medium: Single feature which affects a single functionality which is optionally enabled in the AWS service Low: Niche use case which is particularly affecting the AWS resources if it is configured in a certain way

Supported material Can be either logs, screenshots or documentation links which provide evidence of need of this issue

I can contribute: Yes/No If you are able to contribute towards resolving this request.

Additional context Add any other context or screenshots about the feature request here.

Pull Request number If a pull request has already been created.