Skip to content

S3 Bucket Without Enabled MFA Delete @ /s3.tf #86

Description

@juegge

S3 Bucket Without Enabled MFA Delete issue exists @ s3.tf in branch master

S3 bucket without MFA Delete Enabled. MFA delete cannot be enabled through Terraform, it can be done by adding a MFA device (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html) and enabling versioning and MFA delete by using AWS CLI: 'aws s3api put-bucket-versioning --versioning-configuration=Status=Enabled,MFADelete=Enabled --bucket=<BUCKET_NAME> --mfa=<MFA_SERIAL_NUMBER>'

Namespace: jvlstuff
Repository: JavaVulnerableLab_for_AST
Repository Url: https://github.com/jvlstuff/JavaVulnerableLab_for_AST
CxAST-Project: jvlstuff/JavaVulnerableLab_for_AST
CxAST platform scan: 0b64039c-d08f-4faa-9e25-fb3006178c74
Branch: master
Application: JavaVulnerableLab_for_AST
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions