Skip to content

S3 Bucket Without Enabled MFA Delete @ /s3.tf #86

@juegge

Description

@juegge

S3 Bucket Without Enabled MFA Delete issue exists @ s3.tf in branch master

S3 bucket without MFA Delete Enabled. MFA delete cannot be enabled through Terraform, it can be done by adding a MFA device (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html) and enabling versioning and MFA delete by using AWS CLI: 'aws s3api put-bucket-versioning --versioning-configuration=Status=Enabled,MFADelete=Enabled --bucket=<BUCKET_NAME> --mfa=<MFA_SERIAL_NUMBER>'

Namespace: jvlstuff
Repository: JavaVulnerableLab_for_AST
Repository Url: https://github.com/jvlstuff/JavaVulnerableLab_for_AST
CxAST-Project: jvlstuff/JavaVulnerableLab_for_AST
CxAST platform scan: 0b64039c-d08f-4faa-9e25-fb3006178c74
Branch: master
Application: JavaVulnerableLab_for_AST
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions