logo

Database

Aws Referencing Missing S3 Bucket

Description

Detects AWS Config delivery channels that are configured to use S3 buckets that don't exist. This misconfiguration breaks AWS Config's ability to deliver configuration and compliance data, which can lead to gaps in security monitoring and compliance auditing.

Weakness:

400 - Traceability Loss - AWS

Category: Functionality Abuse

Detection Strategy

    Retrieves all AWS Config delivery channel configurations in the specified region

    For each delivery channel, verifies if the configured S3 bucket exists by attempting to access it

    Reports a vulnerability if the referenced S3 bucket returns a 404 (Not Found) error