Class: S3BucketPublicReadAclRule
- Defined in:
- lib/cfn-nag/custom_rules/S3BucketPublicReadAclRule.rb
Instance Method Summary collapse
Methods inherited from BaseRule
Instance Method Details
#audit_impl(cfn_model) ⇒ Object
17 18 19 20 21 22 23 24 25 |
# File 'lib/cfn-nag/custom_rules/S3BucketPublicReadAclRule.rb', line 17 def audit_impl(cfn_model) logical_resource_ids = [] cfn_model.resources_by_type('AWS::S3::Bucket').each do |bucket| logical_resource_ids << bucket.logical_resource_id if bucket.accessControl == 'PublicRead' end logical_resource_ids end |
#rule_id ⇒ Object
13 14 15 |
# File 'lib/cfn-nag/custom_rules/S3BucketPublicReadAclRule.rb', line 13 def rule_id 'W31' end |
#rule_text ⇒ Object
5 6 7 |
# File 'lib/cfn-nag/custom_rules/S3BucketPublicReadAclRule.rb', line 5 def rule_text 'S3 Bucket likely should not have a public read acl' end |