AWS S3权限审计
原名：auditing-aws-s3-bucket-permissions
系统性地审计 AWS S3 存储桶权限，识别公开访问配置。
- 分类
- 开发提效
- 版本
- v1.0
- 作者
- 弈韬(@ra1nzzz)
- 下载
- 1
- 收藏
- 0
- 发布
- 2026-08-18
- 更新
- 2026-08-21
- TRACE 评分
- 3.4 / 5
内容概览
- When conducting a security assessment of AWS environments to identify publicly exposed data - When onboarding a new AWS account and establishing a security baseline for storage resources - When responding to an alert about potential S3 data exposure from AWS Trusted Advisor or Security Hub - When compliance frameworks (SOC 2, PCI DSS, HIPAA) require periodic review of data access controls - When a breach or credential compromise necessitates immediate review of all accessible S3 resources Do not use for auditing non-AWS object storage (use provider-specific tools), for real-time monitoring (use S3 Event Notifications with Lambda), or for auditing S3 access patterns (use S3 Access Analyzer or CloudTrail S3 data events). - AWS CLI v2 configured with credentials that have s3:GetBucketPolicy, s3:GetBucketAcl, s3:GetBucketPublicAccessBlock, s3:GetEncryptionConfiguration, and s3:ListAllMyBuc…