aquasecurity / aquasecurity/cloudsploit

S3 Bucket Enforce Object Encryption and S3 Bucket Encryption Enforcement plugin fails when Principal is AWS: *

Open
#1,725 1 comment 0 reactions 1 assignee Claimed by @alphadev4 View on GitHub
hotfix
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

These 2 plugins fails even when we have s3 bucket policy with `principal: AWS: "*" .` It only looks for `principal:*` . I recently observed , this has been fixed for S3 Bucket Encryption In Transit plugin which works for both the cases(`AWS:* or *`). Can this also be fixed in below 2 plugins to allow `principal: AWS: "*"` as a valid principal ?

1. S3 Bucket Encryption Enforcement
2. S3 Bucket Enforce Object Encryption

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.