AWS Config
开发人员指南
AWS 文档中描述的 AWS 服务或功能可能因区域而异。要查看适用于中国区域的差异,请参阅 Amazon AWS 入门

s3-bucket-ssl-requests-only

检查 S3 存储桶是否具有需要请求使用安全套接字层 (SSL) 的策略。

标识符:S3_BUCKET_SSL_REQUESTS_ONLY

Trigger type: 配置更改

参数:

符合 SSL AWS Config 规则的存储桶策略示例如下所示:

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": [ "123412341234" ] }, "Action": "s3:Get*", "Resource": "arn:aws:s3:::example-bucket/*" }, { "Effect": "Deny", "Principal": "*", "Action": "*", "Resource": "arn:aws:s3:::example-bucket/*", "Condition": { "Bool": { "aws:SecureTransport": "false" } } } ] }

不符合 SSL AWS Config 规则的存储桶策略示例如下所示:

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": [ "123412341234" ] }, "Action": "s3:Get*", "Resource": "arn:aws:s3:::example-bucket/*" }, { "Effect": "Deny", "Principal": "*", "Action": "*", "Resource": "arn:aws:s3:::example-bucket/private/*", "Condition": { "Bool": { "aws:SecureTransport": "false" } } } ] }

AWS CloudFormation 模板

要使用 AWS CloudFormation 模板创建 AWS Config 托管规则,请参阅使用 AWS CloudFormation 模板创建 AWS Config 托管规则

查看 启动

查看

本页内容: