duo-labs / duo-labs/cloudmapper
audit: Collect and check for S3 bucket encryption
Open
audit
LowPriority
- Dominant language
- JavaScript
- Stars
- 6.3k
- Forks
- 836
- PR merge metrics
- No merged PRs in 30d
Description
In 2017 a feature was released to have default encryption on a bucket: https://aws.amazon.com/blogs/aws/new-amazon-s3-encryption-security-features/
Collect `aws s3api get-bucket-encryption` and check.
This can also be enforced via bucket policies: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.