Block public access to Artifact/AccessLogs Buckets (#977)

* Block public access to Artifact/AccessLogs Buckets --------- authored-by: Fbzioui
aws-cloudformation · May 5, 2023 · e615ac8 · e615ac8
1 parent b907697
commit e615ac8
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/rpdk/core/data/managed-upload-infrastructure.yaml b/src/rpdk/core/data/managed-upload-infrastructure.yaml
@@ -26,6 +26,11 @@ Resources:
       LoggingConfiguration:
         DestinationBucketName: !Ref AccessLogsBucket
         LogFilePrefix: ArtifactBucket
+      PublicAccessBlockConfiguration:
+        BlockPublicAcls: true
+        BlockPublicPolicy: true
+        IgnorePublicAcls: true
+        RestrictPublicBuckets: true
 
   AccessLogsBucket:
     Type: AWS::S3::Bucket
@@ -42,6 +47,11 @@ Resources:
             ExpirationInDays: 3653
       VersioningConfiguration:
         Status: Enabled
+      PublicAccessBlockConfiguration:
+        BlockPublicAcls: true
+        BlockPublicPolicy: true
+        IgnorePublicAcls: true
+        RestrictPublicBuckets: true
 
   ArtifactCopyPolicy:
     Type: AWS::S3::BucketPolicy