aws-s3-bucket-policy-document-config
Bucket policy JSON can embed sensitive principals, identifiers, and condition literals in customer-authored statements.
Where it sits
| location | GetBucketPolicy.Policy |
|---|---|
| location kind | policy_document |
| data kinds | credential sensitive_data pii |
| emits edge | ContainsSecret |
| service | S3 (aws:s3) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | GetBucketPolicy |
| response path | Policy |
| encoding | json |
| params | {"Bucket": "\u003cbucket\u003e"} |
Required permissions
s3:GetBucketPolicy