Skip to main content

💼 2.1.2 Ensure S3 Bucket Policy is set to deny HTTP requests

  • ID: /frameworks/cis-aws-v1.4.0/02/01/02

Stats​

not available

Description​

At the Amazon S3 bucket level, you can configure permissions through a bucket policy making the objects accessible only through HTTPS.

Similar​

  • Sections
    • /frameworks/cis-aws-v1.5.0/02/01/02
    • /frameworks/cis-aws-v1.3.0/02/01/02
  • Internal
    • ID: dec-c-6a2c3877

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v1.3.0 → 💼 2.1.2 Ensure S3 Bucket Policy allows HTTPS requests11no data
💼 CIS AWS v1.5.0 → 💼 2.1.2 Ensure S3 Bucket Policy is set to deny HTTP requests - Level 2 (Automated)11no data

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v1.3.0 → 💼 2.1.2 Ensure S3 Bucket Policy allows HTTPS requests11no data
💼 CIS AWS v1.5.0 → 💼 2.1.2 Ensure S3 Bucket Policy is set to deny HTTP requests - Level 2 (Automated)11no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ AWS S3 Bucket Policy is not set to deny HTTP requests🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-d5fbfc401