AWS Config with s3

Question 1

Which AWS Config s3 rules should you be aware of for the SysOps cert?

Answer 1

s3-bucket-public-write-prohibited

s3-bucket-public-read-prohibited

Question 2

what is the AWS Config s3-bucket-public-write-prohibited

Answer 2

Checks to ensure your s3 bucket is not available to public writes, or that your ACL allows public writes. If they do, your bucket will be non-compliant.

Question 3

what is the AWS Config s3-bucket-public-read-prohibited

Answer 3

Checks that your s3 buckets do not allow public read access via ACL or bucket policy. If it is public read, it will be non-compliant.