AWS cloud watch event pattern to detect S3 buckets creation/modification with public access

I am trying to create an AWS Cloud watch event which will trigger an email whenever a S3 bucket is created or modified to allow public access.

I have created the cloud trail, log stream and am tracking all the S3 events logs. When i am trying to create a custom event by giving the pattern to detect S3 buckets with public access i am not able to fetch any response or the event doesn't get triggered even if i create bucket with public access. Can you help me out with the custom pattern for the same ?

I have tried giving GetPublicAccessBlock, PutPublicAccessBlock etc., in event type but no luck. Please suggest accordingly.

주제

스토리지 서버리스 애플리케이션 통합 관리 및 거버넌스

태그

아마존 심플 스토리지 서비스 아마존 EventBridge 아마존 CloudWatch AWS CloudTrail

언어

English

rePost-User-3145467

질문됨 일 년 전346회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

You can use IAM access analyzer to detect a S3 bucket that allow public access. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html

You can send email for the detection results with Amazon EventBridge and Amazon SNS. https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-eventbridge.html

imiky

답변함 일 년 전

AWS cloud watch event pattern to detect S3 buckets creation/modification with public access

관련 콘텐츠