awslabs / aws-saas-boost

AWS SaaS Boost is a ready-to-use toolset that removes the complexity of successfully running SaaS workloads in the AWS cloud.
Apache License 2.0
954 stars 188 forks source link

Update saas-boost.yaml reflect the new S3 policy #508

Closed muylucir closed 1 year ago

muylucir commented 1 year ago

Changed to use an IAM Policy instead of an ACL for the bucket where S3 Access logs are stored to reflect the new S3 policy.

https://aws.amazon.com/about-aws/whats-new/2023/04/amazon-s3-two-security-best-practices-buckets-default/

Amazon S3 is now deploying two new default bucket security settings by automatically enabling S3 Block Public Access and disabling S3 access control lists (ACLs) for all new S3 buckets.


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license