S3 buckets should require requests to use Secure Socket Layer

0

Hi How to fix this issue " S3 buckets should require requests to use Secure Socket Layer " , as per aws recommendation need to copy paste the below policy to fix the problem.

Can anyone recommend or advice is this right. "Statement": [ { "Sid": "AllowSSLRequestsOnly", "Action": "s3:", "Effect": "Deny", "Resource": [ "arn:aws:s3:::awsexamplebucket", "arn:aws:s3:::awsexamplebucket/" ], "Condition": { "Bool": { "aws:SecureTransport": "false" } }, "Principal": "*" } ] }

已提問 2 年前檢視次數 3618 次
1 個回答
1

Correct.

You need to add this policy into your S3 bucket policy (https://docs.aws.amazon.com/AmazonS3/latest/userguide/add-bucket-policy.html)

You need to change the Resource part (arn:aws:s3:::awsexamplebucket in your example ) into your bucket's ARN (You can find your bucket's ARN on the console while modifying bucket policy)

This policy will reject any request made on the bucket, which doesn't through HTTPS

Ref: https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-policy-for-config-rule/

已回答 2 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南