Checks/Aws/Test-S3BucketPublicWriteAcl.ps1
|
function Test-S3BucketPublicWriteAcl { <# .SYNOPSIS S3 bucket ACL does not grant write access to Everyone or any AWS customer .DESCRIPTION **Amazon S3 buckets** are assessed for ACL grants that allow **public write** access to `AllUsers` or `AuthenticatedUsers` via `WRITE`, `WRITE_ACP`, or `FULL_CONTROL`. Effective **Block Public Access** at account or bucket level (`ignore_public_acls`, `restrict_public_buckets`) is considered. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: s3_bucket_public_write_acl [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check s3_bucket_public_write_acl for reference.', 'N/A', 's3 Resources') } |