💼 [S3.12] ACLs should not be used to manage user access to S3 general purpose buckets

• Contextual name: 💼 [S3.12] ACLs should not be used to manage user access to S3 general purpose buckets

• ID: /frameworks/aws-fsbp-v1.0.0/s3/12

• Located in: 💼 Simple Storage Service (S3)

Description

ACLs are legacy access control mechanisms that predate IAM. Instead of ACLs, we recommend using S3 bucket policies or AWS Identity and Access Management (IAM) policies to manage access to your S3 buckets.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-12
• Internal
  • ID: dec-c-dfd02461

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST SP 800-53 Revision 5 → 💼 AC-2(1) Account Management _ Automated System Account Management		4	16
💼 NIST SP 800-53 Revision 5 → 💼 AC-3 Access Enforcement	15	4	17
💼 NIST SP 800-53 Revision 5 → 💼 AC-3(7) Access Enforcement _ Role-based Access Control			7
💼 NIST SP 800-53 Revision 5 → 💼 AC-3(15) Access Enforcement _ Discretionary and Mandatory Access Control			10
💼 NIST SP 800-53 Revision 5 → 💼 AC-6 Least Privilege	10	21	26

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags