Programmatically reacting to S3 bucket external access exposures

1

Amazon SNS

Let's make it simple and add an SNS topic target to the rule. We can add multiple different subscribers to the topic. Any time when Access Analyzer creates a new finding, SNS can, for example, send an email or a customized Slack message.

#Data Integration #Stream Processing #Web Service Automation 54 social mentions

2

Amazon S3

Zelkova supports multiple AWS services. For example, when we make an S3 bucket public, a red warning badge will appear at the top of the page. This warning comes from Zelkova.

#Cloud Hosting #Object Storage #Cloud Storage 170 social mentions

3

AWS Lambda

Luckily, we can set up a simple monitoring service, which uses a scheduled EventBridge rule and a simple Lambda function.

#Cloud Computing #Cloud Hosting #Backend As A Service 244 social mentions

4

AWS Identity and Access Management

The tool is part of IAM. First, we must create an analyzer, which can be account- or organization-based. The account or the organization will become the zone of trust. In this example, the zone of trust will be an account.

#Identity And Access Management #Identity Provider #SSO 52 social mentions

5

AWS CloudTrail

It uses CloudTrail events up to 90 days in the past and creates a tailor-made policy for the role based on the activity.

#API Tools #APIs #Developer Tools 13 social mentions