1. Login to your AWS Management Console.
2. Navigate to the S3 service.
3. Click on the bucket name you want to remediate.
4. Click on the “Permissions” tab.
5. Scroll down to the “Block public access” section.
6. Click on the “Edit” button.
7. Enable the “Block all public access” option.
8. Click on the “Save changes” button.
9. Repeat the above steps for all the buckets in your AWS account.

​

1. Open the AWS CLI on your local machine or instance.
2. Run the following command to enable the S3 Block Public Access feature on your AWS account:

aws s3api put-public-access-block --public-access-block-configuration BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true

3. Verify that the S3 Block Public Access feature is enabled by running the following command:

aws s3api get-public-access-block

4. If the S3 Block Public Access feature is not enabled, repeat step 2 to enable it.
5. Once the S3 Block Public Access feature is enabled, you can verify that all S3 buckets in your AWS account have the feature enabled by running the following command:

aws s3api get-bucket-policy-status --bucket <bucket-name>

6. If the policy status for the S3 bucket is not compliant, update the bucket policy to ensure that public access is blocked. You can use the following policy as an example:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DenyPublicAccess",
            "Effect": "Deny",
            "Principal": "*",
            "Action": [
                "s3:GetObject",
                "s3:PutObject",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::<bucket-name>",
                "arn:aws:s3:::<bucket-name>/*"
            ],
            "Condition": {
                "Bool": {
                    "aws:SecureTransport": "false"
                }
            }
        }
    ]
}

7. Repeat step 5 and 6 for all S3 buckets in your AWS account to ensure that public access is blocked.

1. Install the AWS SDK for Python (Boto3) by running the following command in your command prompt or terminal:

pip install boto3

2. Import the Boto3 library and create a client for S3:

import boto3

s3 = boto3.client('s3')

3. Enable the “Block Public Access” feature for all existing and future S3 buckets by setting the BlockPublicAcls, IgnorePublicAcls, BlockPublicPolicy, and RestrictPublicBuckets parameters to True:

response = s3.put_public_access_block(
    PublicAccessBlockConfiguration={
        'BlockPublicAcls': True,
        'IgnorePublicAcls': True,
        'BlockPublicPolicy': True,
        'RestrictPublicBuckets': True
    }
)

4. Verify that the “Block Public Access” feature has been enabled by checking the response from the put_public_access_block() method:

print(response)

{
    "ResponseMetadata": {
        "RequestId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
            "x-amz-id-2": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
            "x-amz-request-id": "xxxxxxxxxxxxxxxx",
            "date": "Wed, 19 May 2021 00:00:00 GMT",
            "content-length": "0",
            "server": "AmazonS3"
        },
        "RetryAttempts": 0
    }
}