Check for S3 Bucket Public Permissions and Automate Permission Removal

We need a check that looks for public S3 read/write permissions and automatically revokes these when found. This check would look for the following public permissions:

Bucket list objects
Bucket write objects (This is high severity)
Bucket read permissions
Bucket write permissions (This is high severity)

For the high severity permissions we should explicitly detail the customer should manually audit the bucket and it's objects to ensure that is has not been compromised.

This automation workflow can follow a similar pattern to the one for Exposed Access Keys linked below:

https://github.com/aws/Trusted-Advisor-Tools/tree/master/ExposedAccessKeys

Let me know what you think about this proposed check.

Start by reviewing the ExposedAccessKeys workflow linked in the issue to understand the repository’s AWS Lambda and CloudWatch Events pattern. Then determine how the proposed check should identify and revoke public S3 list, read, and write permissions, including the required high-severity audit warning. Done means the workflow detects these permissions, removes them as specified, and communicates the manual audit requirement.

Written by the indexing model from the issue text.