s3-bucket-ssl-requests-only
Checks if S3 buckets have policies that require requests to use SSL/TLS. The rule is NON_COMPLIANT if any S3 bucket has policies allowing HTTP requests.
Note
If a single value in an S3 bucket policy (for example, one Resource or Condition value) contains more than five IAM policy variables, the rule can't evaluate that policy and returns NON_COMPLIANT, even if the policy would otherwise be compliant. To get an accurate evaluation, split any value that contains more than five policy variables so that each value contains five or fewer.
Identifier: S3_BUCKET_SSL_REQUESTS_ONLY
Resource Types: AWS::S3::Bucket
Trigger type: Configuration changes
Amazon Web Services Region: All supported Amazon regions
Parameters:
- None
Amazon CloudFormation template
To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.