Controls
12 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| S3 buckets should not use ACLs for user access controls3_bucket_acls_should_prohibit_user_access 7.2.1 | 7.2.1 | |
| S3 buckets should have cross-region replication enableds3_bucket_cross_region_replication_enabled None | None | |
| S3 buckets should have default encryption enabled using KMSs3_bucket_default_encryption_enabled_kms 3.5.1 | 3.5.1 | |
| S3 buckets should have event notifications enableds3_bucket_event_notifications_enabled 11.5.2 | 11.5.2 | |
| S3 buckets should have logging enableds3_bucket_logging_enabled 5.3.4 | 5.3.4 | |
| S3 buckets should have MFA delete enableds3_bucket_mfa_delete_enabled 3.5.1.3 | 3.5.1.3 | |
| S3 buckets should have object lock enableds3_bucket_object_lock_enabled 10.3.4 | 10.3.4 | |
| S3 buckets should restrict cross-account permissionss3_bucket_policy_restricts_cross_account_permission_changes 7.2.1 | 7.2.1 | |
| S3 buckets with versioning enabled should have lifecycle policies configureds3_bucket_versioning_and_lifecycle_policy_enabled 3.2.1 | 3.2.1 | |
| S3 buckets should have versioning enableds3_bucket_versioning_enabled 10.3.4 | 10.3.4 | |
| S3 public access should be blocked at account levels3_public_access_block_account 1.2.8 | 1.2.8 | |
| S3 public access should be blocked at bucket levels3_public_access_block_bucket 10.3.4 | 10.3.4 |