awslabs / aws-config-rules

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.
http://aws.amazon.com/config/
Creative Commons Zero v1.0 Universal
1.62k stars 854 forks source link

S3 bucket policy prohibited on web-server mode #390

Open caiofralmeida opened 2 years ago

caiofralmeida commented 2 years ago

Hi folks,

We are using the policy that prohibits buckets with policy, but we have a case where we want to run a bucket as a web server with static content, for that we need to make it public and apply an internal access policy.

This scenario generates a false positive alert. I would like to know if it would make any sense to have the possibility to skip a specific resource from a custom tag?

If this solution is feasible, I would like to contribute.