If utilizing Block Public Access (bucket settings)

From Console:

Login to AWS Management Console and open the Amazon S3 console using https://console.aws.amazon.com/s3/
Select the Check box next to the Bucket.
Click on 'Edit public access settings'.
Click 'Block all public access'
Repeat for all the buckets in your AWS account that contain sensitive data.

From Command Line:

List all of the S3 Buckets

aws s3 ls

Set the Block Public Access to true on that bucket

aws s3api put-public-access-block --bucket --public-access-block-configuration "BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true"

If utilizing Block Public Access (account settings)

From Console:

If the output reads 'true' for the separate configuration settings then it is set on the account.

Login to AWS Management Console and open the Amazon S3 console using https://console.aws.amazon.com/s3/
Choose 'Block Public Access (account settings)'
Choose 'Edit' to change the block public access settings for all the buckets in your AWS account
Choose the settings you want to change, and then choose 'Save'. For details about each setting, pause on the 'i' icons.
When you're asked for confirmation, enter 'confirm'. Then Click 'Confirm' to save your changes.

From Command Line:

To set Block Public access settings for this account, run the following command:

aws s3control put-public-access-block
--public-access-block-configuration BlockPublicAcls=true, IgnorePublicAcls=true, BlockPublicPolicy=true, RestrictPublicBuckets=true
--account-id
.

ID	Name	CSP	Domain	Severity
AC_AWS_0428	Ensure that S3 Buckets are configured with 'Block public access (bucket settings)'	AWS	Infrastructure Security	MEDIUM
AC_AWS_0608	Ensure that S3 Buckets are configured with 'Block public access (bucket settings)'	AWS	Infrastructure Security	MEDIUM

Detections

Analytics

Tenable Cloud Security Policies Search

MEDIUM

MEDIUM