From 8b71bdf249ab4cc0f0f2397ce65b078acf5e3673 Mon Sep 17 00:00:00 2001 From: Christian Cleberg Date: Tue, 3 Mar 2026 19:07:23 -0600 Subject: fix unintended subscripts in latest posts (#18) --- content/blog/2026-03-03-auditing-aws-s3.org | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'content/blog') diff --git a/content/blog/2026-03-03-auditing-aws-s3.org b/content/blog/2026-03-03-auditing-aws-s3.org index 90f4726..36e0839 100644 --- a/content/blog/2026-03-03-auditing-aws-s3.org +++ b/content/blog/2026-03-03-auditing-aws-s3.org @@ -78,7 +78,7 @@ The reverse is also true. A bucket with no public policy and no public ACLs is still at risk if PAB is missing or incomplete, because nothing is in place to prevent a future policy or ACL change from exposing it. -* What the Script Does +M* What the Script Does The script lists every bucket in the account, determines each bucket's region, runs all three checks against it, and appends the results to a CSV file. @@ -166,14 +166,14 @@ c67fa6bd-2fd5-4bc5-825d-587fb535bf2e,eu-west-1,TRUE,No Policy,FALSE,FALSE,"FALSE Here's how to read each column: -- *PAB_FullyRestricted*: ~TRUE~ means all four PAB flags are enabled at the bucket +- =PAB_FullyRestricted=: ~TRUE~ means all four PAB flags are enabled at the bucket level. ~FALSE-VULNERABLE~ means PAB exists but is incomplete. ~CRITICAL-MISSING~ means no PAB configuration exists at all. -- *Policy_IsPublic*: ~true~ means AWS has determined the bucket policy grants public +- =Policy_IsPublic=: ~true~ means AWS has determined the bucket policy grants public access. ~false~ means it doesn't. ~No Policy~ means no bucket policy is attached. -- *ACL_AllUsersRead / ACL_AllUsersWrite*: ~TRUE~ means the bucket has an ACL +- =ACL_AllUsersRead= / =ACL_AllUsersWrite=: ~TRUE~ means the bucket has an ACL granting that permission to the public internet. ~FALSE~ means it doesn't. -- *OverallPublicStatus*: ~FALSE~ means the bucket is not publicly accessible based +- =OverallPublicStatus=: ~FALSE~ means the bucket is not publicly accessible based on all three checks. ~TRUE~ values include the specific reason (e.g., ~TRUE - ACL Read~, ~TRUE - Policy~, ~TRUE - PAB Missing (CRITICAL)~). -- cgit v1.2.3