TLS 1.2 and Direct Read-Only Access to Single File in S3 Public Bucket

Question

We have a number of apps that have direct read-only access links to individual files in a public bucket. They access the content in a url structure that starts like this:

https://XXXXXXX.s3.amazonaws.com/

Will Direct Access to https://XXXXXXX.s3.amazonaws.com/ go away on June 28, 2023 if bucket is public?

I'm getting conflicted information on this and want to make sure those will still be accessible. I have run a test on another public bucket that I configured to accept only 1.2 connections and it still appears to be accessible, but I just wanted to double check.

Answer

Hi,

Yes, from [June 28, 2023](https://aws.amazon.com/blogs/security/tls-1-2-required-for-aws-endpoints/) you must use TLS version 1.2 or later to access content that's stored in your S3 buckets, but regardless of whether it is public or private, so you have nothing to worry about.

Also from [April 2023](https://aws.amazon.com/about-aws/whats-new/2022/12/amazon-s3-automatically-enable-block-public-access-disable-access-control-lists-buckets-april-2023/), all new S3 buckets will by default have S3 Block Public Access enabled and access control lists (ACLs) disabled, so you will deliberately need to configure it to be public.

Answer

Hi,

Are you referring about [Amazon S3 Security changes](https://aws.amazon.com/blogs/aws/heads-up-amazon-s3-security-changes-are-coming-in-april-of-2023/) that are effective from April 2023 ? This is applicable for the new buckets creation.

Also If you need public access for a new bucket you can create it as usual and then delete the public access block by calling [DeletePublicAccessBlock ](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeletePublicAccessBlock.html)(you will need s3:PutBucketPublicAccessBlock permission in order to call this function; read [Block Public Access](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html) to learn more about the functions and the permissions).

Let us know if you are referring something else other than the setting mentioned above.

TLS 1.2 and Direct Read-Only Access to Single File in S3 Public Bucket

Relevant content