English | 中文

This is the scenario in which the AWS S3 bucket server-side encryption disable.

Execute the following command in the container

cd /TerraformGoat/aws/s3/bucket_default_encryption_disable

Configure AWS Access Credentials

aws configure

You can see the access key in the AWS [Console --> Security Credentials]

Deploy Vulnerable Environment

terraform init
terraform apply

When the terminal prompts Enter a value:, enter yes

After the environment is set up, you can see the created Bucket at Outputs.

Get the encryption method of the Bucket, if the return content is as follows, then the Bucket encryption is not enabled.

> aws s3api get-bucket-encryption --bucket houxian-xxx

An error occurred (ServerSideEncryptionConfigurationNotFoundError) when calling the GetBucketEncryption operation: The server side encryption configuration was not found

terraform destroy