Configuring block public access settings for your account
Amazon S3 Block Public Access provides settings for access points, buckets, and accounts to help you manage public access to Amazon S3 resources. By default, new buckets, access points, and objects do not allow public access.
For more information, see Blocking public access to your Amazon S3 storage.
Note
Account level settings override settings on individual objects. Configuring your account to block public access will override any public access settings made to individual objects within your account.
You can use the S3 console, Amazon CLI, Amazon SDKs, and REST API to configure block public access settings for all the buckets in your account. For more information, see the sections below.
To configure block public access settings for your buckets, see Configuring block public access settings for your S3 buckets. For information about access points, see Performing block public access operations on an access point.
Amazon S3 block public access prevents the application of any settings that allow public access to data within S3 buckets. This section describes how to edit block public access settings for all the S3 buckets in your Amazon Web Services account. For more information about blocking public access, see Blocking public access to your Amazon S3 storage.
To edit block public access settings for all the S3 buckets in an Amazon Web Services account
Sign in to the Amazon Web Services Management Console and open the Amazon S3 console at https://console.amazonaws.cn/s3/
. -
Choose Block Public Access settings for this account.
-
Choose Edit to change the block public access settings for all the buckets in your Amazon Web Services account.
-
Choose the settings that you want to change, and then choose Save changes.
-
When you're asked for confirmation, enter
confirm
. Then choose Confirm to save your changes.
You can use Amazon S3 Block Public Access through the Amazon CLI. For more information about setting up and using the Amazon CLI, see What is the Amazon Command Line Interface?
Account
-
To perform block public access operations on an account, use the Amazon CLI service
s3control
. The account-level operations that use this service are as follows:-
PUT PublicAccessBlock (for an account)
-
GET PublicAccessBlock (for an account)
-
DELETE PublicAccessBlock (for an account)
-
For additional information and examples, see put-public-access-block
For information about using Amazon S3 Block Public Access through the REST APIs, see the following topics in the Amazon Simple Storage Service API Reference.
-
Account-level operations