Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure S3 general purpose buckets require requests to use SSL #222

Open
GodwinShen opened this issue Oct 22, 2024 · 1 comment
Open

Ensure S3 general purpose buckets require requests to use SSL #222

GodwinShen opened this issue Oct 22, 2024 · 1 comment
Assignees
Labels
Feature Feature label used in Unity Project U-ADS

Comments

@GodwinShen
Copy link

The S3 general purpose buckets should require requests to use SSL control is defined as follows:
[S3.5] This control checks whether an Amazon S3 general purpose bucket has a policy that requires requests to use SSL. The control fails if the bucket policy doesn't require requests to use SSL. Remediation instructions
S3 buckets should have policies that require all requests (Action: S3:*) to only accept transmission of data over HTTPS in the S3 resource policy, indicated by the condition key aws:SecureTransport.

Several resources were identify as non-compliant, see the list in: https://jaas.gsfc.nasa.gov/servicedesk/customer/portal/2/GSD-4081

@galenatjpl
Copy link

galenatjpl commented Nov 6, 2024

This is fixed for the U-CS MC bucket

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature Feature label used in Unity Project U-ADS
Projects
Status: Todo
Development

No branches or pull requests

5 participants