Description

Detects S3 buckets that may allow insecure data transmission over HTTP instead of HTTPS. This creates a security risk by potentially exposing data to interception during transit since HTTP traffic is unencrypted.

Detection Strategy

• Examines the bucket policy of each S3 bucket in the AWS account

• Checks if the bucket policy includes statements that enforce secure transport (HTTPS)

• Reports a vulnerability if a bucket policy allows access without requiring secure transport

• Evaluates the 'Statement' section of bucket policies to identify missing or inadequate secure transport requirements