2026 Critical Cloud Control Plane Detection: Storage Bucket ACL Modified to Grant Public Read or Write Access

Ibrahim Saud@tektrix

•updated 5 days ago•0•0•0

Detects modifications to AWS S3 bucket Access Control Lists (ACLs) using the 'PutBucketAcl' API call that grant public read or write permissions. This could indicate an attempt to make sensitive data stored in S3 publicly accessible, potentially leading to data exfiltration.