iac/terraform/tf-s3-public-access-block-disabled

S3 public access block is disabled

mediumTerraformiac-terraform

What it detects

Setting any of `block_public_acls`, `block_public_policy`, `ignore_public_acls`, or `restrict_public_buckets` to `false` weakens the account/bucket guardrail that stops a bucket from accidentally becoming public.

Remediation

Keep all four `aws_s3_bucket_public_access_block` flags set to `true` unless you have a documented reason to serve objects publicly.

How it runs

Detection layer not documented.

Found a false positive or want this rule tuned? File an issue. You can also suppress per-repo via a .repoguardignore line.