aquasecurity / aquasecurity/cloudsploit
S3 Bucket Enforce Object Encryption and S3 Bucket Encryption Enforcement plugin fails when Principal is AWS: *
Open
hotfix
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
These 2 plugins fails even when we have s3 bucket policy with `principal: AWS: "*" .` It only looks for `principal:*` . I recently observed , this has been fixed for S3 Bucket Encryption In Transit plugin which works for both the cases(`AWS:* or *`). Can this also be fixed in below 2 plugins to allow `principal: AWS: "*"` as a valid principal ?
1. S3 Bucket Encryption Enforcement
2. S3 Bucket Enforce Object Encryption
Contributor guide
Assessment
This issue has not been assessed yet.