It would be nice to have the ability to enforce AWS Foundational Security Best Practice through CDK.
Use Case
When creating s3 buckets AWS FSBP should be followed.
Proposed Solution
new s3.Bucket(stack, 'MyBucket', {
enforceSecurityBestPractice: true,
});
And behind the scenes it will block all public access and enforce data transmission over HTTPS.
A PR is ready to go which introduces a simple way of adding these controls for s3 buckets.
Other
This is really just to get the conversation started around enforcing the AWS FSBP controls as a default for CDK and perhaps this could be a first step into helping prevent AWS users from using defaults which are not secure.
This is a 🚀 Feature Request
It would be nice to have the ability to enforce AWS Foundational Security Best Practice through CDK.
Use Case
When creating s3 buckets AWS FSBP should be followed.
Proposed Solution
And behind the scenes it will block all public access and enforce data transmission over HTTPS.
A PR is ready to go which introduces a simple way of adding these controls for s3 buckets.
Other
This is really just to get the conversation started around enforcing the AWS FSBP controls as a default for CDK and perhaps this could be a first step into helping prevent AWS users from using defaults which are not secure.
This is a 🚀 Feature Request