Rule: S3 Buckets Should Enforce SSL

Rule Description:

Troubleshooting Steps (if applicable):

2. 1.
   Verify if SSL is enabled: Check the S3 bucket configuration settings to ensure that SSL is enabled for both incoming and outgoing data transmission.
4. 2.
   Update SSL settings: If SSL is not enabled, modify the bucket policy or access control list (ACL) to enforce SSL encryption for all data transfers.
6. 3.
   Test SSL connectivity: Use an SSL testing tool or perform manual tests to verify that SSL encryption is successfully enforced for the S3 bucket.

Necessary Code (if applicable):

{
  "Version": "2012-10-17",
  "Id": "EnforceSSLOnly",
  "Statement": [
    {
      "Effect": "Deny",
      "Principal": "*",
      "Action": "s3:*",
      "Resource": "arn:aws:s3:::your-bucket-name/*",
      "Condition": {
        "Bool": {
          "aws:SecureTransport": "false"
        }
      }
    }
  ]
}

your-bucket-name

your-bucket-name

Step-by-Step Guide for Remediation:

2. 1.

   Identify the target S3 bucket: Determine the S3 bucket(s) that need SSL enforcement for GxP 21 CFR Part 11 compliance.

4. 2.

   Access S3 bucket settings: Login to the AWS Management Console and navigate to the S3 service.

6. 3.

   Select the target bucket: Locate and click on the target S3 bucket from the list of available buckets.

8. 4.

   Configure SSL settings: Within the bucket configuration options, enable SSL encryption for both incoming and outgoing data transfers. This ensures that all data transmission to and from the bucket is encrypted.

10. 5.

    Update bucket policy or ACL: If SSL enforcement is not already in place, update the bucket policy or access control list (ACL) to enforce SSL encryption for all data transfers. Use the provided code snippet as a reference or modify the existing policy.

12. 6.

    Save and apply changes: Once the SSL settings are configured and the policy is updated, save the changes to apply SSL enforcement to the S3 bucket.

14. 7.

    Test SSL connectivity: Perform tests to verify that SSL encryption is now enforced for the S3 bucket. Check whether all data transfers to and from the bucket are utilizing SSL connections.