Checks/Aws/Test-S3BucketDefaultEncryption.ps1
|
function Test-S3BucketDefaultEncryption { <# .SYNOPSIS S3 bucket has default server-side encryption (SSE) enabled .DESCRIPTION **Amazon S3 buckets** have a default **server-side encryption** setting that automatically encrypts new objects using `SSE-S3` or `SSE-KMS`. This evaluates whether a bucket has a default encryption configuration defined. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: s3_bucket_default_encryption [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check s3_bucket_default_encryption for reference.', 'N/A', 's3 Resources') } |