Synchx00 a812249c4c fix(s3): address review feedback on s3_bucket_object_public ...

Make the check opt-in via three audit_config keys (disabled by default),
lower severity to low, and clarify that this is a spot-check sample.

- prowler/config/config.yaml: add s3_bucket_object_public_enabled
  (False), _max_objects (100), _sample_size (3) with guidance pointing
  to s3_bucket_acl_prohibited for comprehensive coverage.
- Check early-returns when disabled; otherwise reads max_objects and
  sample_size from audit_config. Uses Check_Report_AWS. Compares the
  AllUsers group URI exactly instead of substring-matching. PASS
  message discloses the sample size and recommends disabling ACLs via
  Object Ownership for full assurance.
- metadata.json: Severity -> low; Description, Notes and Recommendation
  disclose the sampling limitation and cross-reference
  s3_bucket_acl_prohibited; RelatedTo links the two checks.
- Unit tests cover: disabled-by-default (no findings), empty bucket
  PASS, private-objects PASS, public-object FAIL, AccessDenied MANUAL,
  other ClientError MANUAL.

2026-04-22 15:51:22 +07:00

..

lib

fix(docs): Fix dead links leading to docs.prowler.cloud (#9240)

2025-11-17 09:56:51 +01:00

services

fix(s3): address review feedback on s3_bucket_object_public

2026-04-22 15:51:22 +07:00

aws_provider_test.py

chore(regions_update): Changes in regions for AWS services (#8728)

2025-09-15 15:02:37 +02:00

aws_regions_by_service.json

fix(aws-cn partition): solve aws-cn partition errors (#1576)

2022-12-22 15:39:50 +01:00

utils.py

feat(scan): add mutelist and config file to scan (#5310)

2024-10-18 10:34:46 +02:00