GSA / GSA/grace-logging

Force HTTPS only for buckets

Open
#35 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
HCL
Stars
0
Forks
5
PR merge metrics
No merged PRs in 30d

Description

I wanted to suggest adding forcing HTTPS only for the Access and CloudTrail buckets created by this repository.

Adding something like the below policy to the logging and access buckets should do the trick!

```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Deny",
"Principal": "*",
"Action": "*",
"Resource": [
"arn:aws:s3:::${aws_s3_bucket.logging.id}/*"
],
"Condition": {
"Bool": {
"aws:SecureTransport": "false"
}
}
}
]
}

```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.