Ensuring Rule Compliance: S3 Bucket Versioning Enabled
Discover why S3 bucket versioning should be enabled to meet cybersecurity standards.
| Rule | S3 bucket versioning should be enabled |
| Framework | Federal Financial Institutions Examination Council (FFIEC) |
| Severity | ✔ High |
Rule: S3 bucket versioning should be enabled for Federal Financial Institutions Examination Council (FFIEC).
Description: The Federal Financial Institutions Examination Council (FFIEC) requires that S3 bucket versioning be enabled to ensure data integrity and accurate auditing capabilities. Enabling versioning allows you to preserve, retrieve, and restore every version of every object within the bucket. This ensures that any data modification or deletion can be traced, and previous versions of objects can be recovered if necessary.
Troubleshooting Steps: If S3 bucket versioning is not already enabled, follow the steps below to enable it:
- 1.Log in to the AWS Management Console.
- 2.Navigate to the S3 service.
- 3.Select the bucket that requires versioning.
- 4.Click on the "Properties" tab.
- 5.Under the "Versioning" section, click on the "Edit" button.
- 6.Enable versioning by selecting the "Enable versioning" option.
- 7.Click on "Save changes" to apply the configuration.
Code Example (AWS CLI): If you prefer using the AWS CLI, you can enable S3 bucket versioning with the following command:
aws s3api put-bucket-versioning --bucket your-bucket-name --versioning-configuration Status=Enabled
Remediation Steps: To enable versioning for an S3 bucket using the AWS Management Console, follow these steps:
- 1.Open the AWS Management Console in your web browser and navigate to the S3 service.
- 2.Choose the bucket that needs versioning enabled.
- 3.Click on the "Properties" tab.
- 4.Under the "Versioning" section, click on the "Edit" button.
- 5.Select the "Enable versioning" option.
- 6.Click on "Save changes" to apply the configuration.
To enable versioning using the AWS CLI, follow these steps:
- 1.Open the AWS CLI on your local machine or terminal.
- 2.Run the following command, replacing "your-bucket-name" with the actual name of your S3 bucket:
aws s3api put-bucket-versioning --bucket your-bucket-name --versioning-configuration Status=Enabled
After enabling versioning, your S3 bucket will retain multiple versions of objects, ensuring compliance with FFIEC requirements.