Description

Detects S3 buckets that have versioning disabled or not configured. S3 bucket versioning is a critical security feature that protects against accidental or malicious deletion of objects and maintains a history of object modifications, helping with data recovery and audit compliance.

Detection Strategy

• Identifies a vulnerability when an S3 bucket has no versioning configuration (Status field is empty)

• Reports a vulnerability when bucket versioning is explicitly set to a value other than 'Enabled' (e.g., Suspended)

• Examines each S3 bucket in the AWS account individually through the bucket versioning configuration