Ensure that S3 Bucket policy doesn't allow actions from all principals without a condition
Misconfigured S3 buckets can leak private information to the entire internet or allow unauthorized data tampering / deletion. S3 bucket policy should ensure that the principle of least privilege is being followed. A condition statement can be used to control the scope of the policy.
Updated 6 months ago