Question 1

Is attach_policy enforced for ACSC Essential Eight?

Accepted Answer

Yes, This control checks whether the S3 bucket policy prevents principals from other AWS accounts from performing denied actions on resources in the S3 bucket.

Question 2

Is block_public_acls enforced for ACSC Essential Eight?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 3

Is block_public_policy enforced for ACSC Essential Eight?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 4

Is ignore_public_acls enforced for ACSC Essential Eight?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 5

Is logging enforced for ACSC Essential Eight?

Accepted Answer

Yes, AWS Simple Storage Service (AWS S3) server access logging provides a method to monitor the network for potential cybersecurity events.

Question 6

Is object_ownership enforced for ACSC Essential Eight?

Accepted Answer

Yes, This control checks whether AWS S3 buckets provide user permissions via ACLs. The control fails if ACLs are configured for managing user access on S3 buckets.

Question 7

Is restrict_public_buckets enforced for ACSC Essential Eight?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 8

Is versioning enforced for ACSC Essential Eight?

Accepted Answer

Yes, Once MFA Delete is enabled on your sensitive and classified S3 bucket it requires the user to have two forms of authentication.

AWS S3 bucket Terraform module

Terraform Module Source