google / cloud-forensics-utils

Python library to carry out DFIR analysis on the Cloud
Apache License 2.0
454 stars 88 forks source link

Add the ability to set the PublicAccessBlock config on S3 buckets #306

Open hiddenillusion opened 3 years ago

hiddenillusion commented 3 years ago

Even though S3 buckets/objects do not allow public access by default, a best practice is to explicitly disable public access to prevent inadvertently making a bucket/object public in the future.

This can be accomplished by making a request to put_public_access_block() & setting all of the values in PublicAccessBlockConfiguration to "True".