Skip to content

S3 Bucket Without Enabled MFA Delete @ /s3.tf #103

@mridilla

Description

@mridilla

S3 Bucket Without Enabled MFA Delete issue exists @ s3.tf in branch master

S3 bucket without MFA Delete Enabled. MFA delete cannot be enabled through Terraform, it can be done by adding a MFA device (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html) and enabling versioning and MFA delete by using AWS CLI: 'aws s3api put-bucket-versioning --versioning-configuration=Status=Enabled,MFADelete=Enabled --bucket=<BUCKET_NAME> --mfa=<MFA_SERIAL_NUMBER>'

Namespace: mridilla
Repository: JavaVulnerableLab
Repository Url: https://github.com/mridilla/JavaVulnerableLab
CxAST-Project: mridilla/JavaVulnerableLab
CxAST platform scan: e1fc43b6-0e4d-4a93-8009-8fe24d4a9091
Branch: master
Application: JavaVulnerableLab
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions