Audit AWS S3 bucket public accessibility and edge-case exposure.
npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill s3-aurainfosec
Please help me install this Agent Skill. Skill: s3 Source: https://github.com/aurainfosec/cloud-review-automation-poc/tree/main/skills/s3 Command: npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill s3-aurainfosec
This Skill helps you manage and audit AWS S3 buckets by turning common security and operational questions into practical, evidence-based bucket configuration and exposure checks.
Use the s3 skill to determine whether a target bucket is publicly readable by running an unauthenticated probe and validating the result against the bucket’s Public Access Block configuration.
High-intent search queries and answers about installing and using this skill.
To check S3 bucket public accessibility, perform an unauthenticated anonymous probe and cross-reference the results against the bucket's Public Access Block configuration to accurately identify exposure.
The Block Public Access enforcement hierarchy requires cross-referencing unauthenticated AccessDenied responses against public policy settings to verify whether access is blocked at the bucket or account level.
Create S3 buckets with security best practices by enabling versioning, default encryption, and public access blocking to establish governance and harden access controls from the start.
Yes, you can audit hidden S3 enumeration paths by validating versions and multipart uploads to uncover edge-case exposure and prevent anonymous metadata leakage.
An anonymous S3 probe returns AccessDenied because the Block Public Access settings override the bucket policy, requiring cross-referencing to distinguish unauthenticated blocks from actual public policy exposure.
david-2814Automate S3 bucket, object, lifecycle, and access-control management via AWS CLI.
seandkendallAudit and secure S3 buckets with encryption, logging, and access controls.
giuseppe-trisciuoglioImplement AWS SDK for Java 2.x S3 bucket and object operations.
anyshift-ioAudit AWS S3 bucket estates by composing Block Public Access, policy, ACL, and access point layers.
