1 Risposta
- Più recenti
- Maggior numero di voti
- Maggior numero di commenti
0
This control disallows changes to encryption for all Amazon S3 buckets. This is a preventive control with elective guidance. By default, this control is not enabled.
The artifact for this control is the following service control policy (SCP). { "Version": "2012-10-17", "Statement": [ { "Sid": "GRAUDITBUCKETENCRYPTIONENABLED", "Effect": "Deny", "Action": [ "s3:PutEncryptionConfiguration" ], "Resource": [""], "Condition": { "ArnNotLike": { "aws:PrincipalARN":"arn:aws:iam:::role/AWSControlTowerExecution" } } } ] }
With the above you should be able to create bucket but encryption might not have been enabled for the bucket. more details: https://docs.aws.amazon.com/controltower/latest/userguide/elective-controls.html
con risposta 3 mesi fa
Contenuto pertinente
- AWS UFFICIALEAggiornata un anno fa
- AWS UFFICIALEAggiornata 2 anni fa