Checks/Aws/Test-S3AccessPointPublicAccessBlock.ps1
|
function Test-S3AccessPointPublicAccessBlock { <# .SYNOPSIS S3 access point has all Block Public Access settings enabled .DESCRIPTION **Amazon S3 access points** have **Block Public Access** configured with all settings enabled: `block_public_acls`, `ignore_public_acls`, `block_public_policy`, and `restrict_public_buckets`. The evaluation inspects each access point's public access block configuration. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: s3_access_point_public_access_block [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check s3_access_point_public_access_block for reference.', 'N/A', 's3 Resources') } |