Checks/Aws/Test-CloudtrailLogsS3BucketIsNotPubliclyAccessible.ps1
|
function Test-CloudtrailLogsS3BucketIsNotPubliclyAccessible { <# .SYNOPSIS CloudTrail trail S3 bucket is not publicly accessible .DESCRIPTION CloudTrail log destination **S3 buckets** are inspected for ACL grants that expose data to the public `AllUsers` group. Buckets hosted in other accounts are flagged for out-of-scope review. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: cloudtrail_logs_s3_bucket_is_not_publicly_accessible [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check cloudtrail_logs_s3_bucket_is_not_publicly_accessible for reference.', 'N/A', 'cloudtrail Resources') } |