DevOps Articles

Heads-Up: Amazon S3 Security Changes Are Coming in April of 2023

https://aws.amazon.com/polly/ Starting in April of 2023 we will be making two changes to https://aws.amazon.com/s3/ to put our latest best practices for bucket security into effect automatically. The changes will begin to go into effect in April and will be rolled out to all AWS Regions within weeks. Once the changes are in effect for a target Region, all newly created buckets in the Region will by default have https://aws.amazon.com/blogs/aws/amazon-s3-block-public-access-another-layer-of-protection-for-your-accounts-and-buckets/ enabled and https://aws.amazon.com/blogs/aws/new-simplify-access-management-for-data-stored-in-amazon-s3/ (ACLs) disabled. Both of these options are already console defaults and have long been recommended as best practices.

ACLs Disabled – The Bucket owner enforced setting will be enabled for newly created buckets, making bucket ACLs and object ACLs ineffective, and ensuring that the bucket owner is the object owner no matter who uploads the object.