Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure S3 general purpose buckets require requests to use SSL #222

Open
GodwinShen opened this issue Oct 22, 2024 · 4 comments
Open

Ensure S3 general purpose buckets require requests to use SSL #222

GodwinShen opened this issue Oct 22, 2024 · 4 comments
Assignees
Labels
Feature Feature label used in Unity Project U-ADS

Comments

@GodwinShen
Copy link

The S3 general purpose buckets should require requests to use SSL control is defined as follows:
[S3.5] This control checks whether an Amazon S3 general purpose bucket has a policy that requires requests to use SSL. The control fails if the bucket policy doesn't require requests to use SSL. Remediation instructions
S3 buckets should have policies that require all requests (Action: S3:*) to only accept transmission of data over HTTPS in the S3 resource policy, indicated by the condition key aws:SecureTransport.

Several resources were identify as non-compliant, see the list in: https://jaas.gsfc.nasa.gov/servicedesk/customer/portal/2/GSD-4081

@galenatjpl
Copy link

galenatjpl commented Nov 6, 2024

This is fixed for the U-CS MC bucket

@galenatjpl galenatjpl moved this from Todo to In Progress in Unity Project Board Dec 17, 2024
@LucaCinquini
Copy link

This is also fixed for the SPS buckets, as part of the 24.4 release issued on 2025-01-02. This release must be deployed to all venues for the changes to take effefct.

@brianlee731
Copy link
Contributor

Waiting on MCP Security to review and close out their ticket before closing this one.

@brianlee731
Copy link
Contributor

there are other random buckets by our team without appropriate policies. We need to make sure that everyone who creates a S3 bucket follow a standard process and define appropriate policy for it. Will discuss at team tag-up.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature Feature label used in Unity Project U-ADS
Projects
Status: In Progress
Development

No branches or pull requests

6 participants