Devolutions.CIEM

0.3.28

Checks/Aws/Test-S3BucketPublicListAcl.ps1

                                function Test-S3BucketPublicListAcl {

    <#

    .SYNOPSIS

        S3 bucket is not publicly listable by Everyone or any authenticated AWS user

    .DESCRIPTION

        **Amazon S3 buckets** are evaluated for **public listing via ACLs**. Grants of `READ`, `READ_ACP`, or `FULL_CONTROL` to the `AllUsers` or `AuthenticatedUsers` groups are identified. Effective **Block Public Access** at account or bucket level (notably `IgnorePublicAcls` and `RestrictPublicBuckets`) is considered in the evaluation.

    .PARAMETER Check

        CIEMCheck object containing check metadata.

    #>

    [CmdletBinding()]

    [OutputType([PSCustomObject[]])]

    param(

        [Parameter(Mandatory)]

        [CIEMCheck]$Check

    )

    $ErrorActionPreference = 'Stop'

    # TODO: Implement check logic based on Prowler check: s3_bucket_public_list_acl

    [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check s3_bucket_public_list_acl for reference.', 'N/A', 's3 Resources')

}