Checks/Aws/Test-S3AccountLevelPublicAccessBlocks.ps1
|
function Test-S3AccountLevelPublicAccessBlocks { <# .SYNOPSIS S3 account-level Block Public Access ignores public ACLs and restricts public buckets .DESCRIPTION **Amazon S3** account-level **Block Public Access** is assessed for `ignore_public_acls` and `restrict_public_buckets` to confirm centralized blocking of ACL-based public access and limiting buckets with public policies to in-account principals. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: s3_account_level_public_access_blocks [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check s3_account_level_public_access_blocks for reference.', 'N/A', 's3 Resources') } |