S3 Bucket Policies - Require TLS to access the S3 Bucket.

An S3 Bucket policy that denies any access to the S3 bucket that is not encrypted in-transit (uses HTTP instead of HTTPS) .

Policy|CloudFormation |AWS CLI

Missing Parameters

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Principal": {
                "AWS": "*"
            },
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::/*",
                "arn:aws:s3:::"
            ],
            "Effect": "Deny",
            "Condition": {
                "Bool": {
                    "aws:SecureTransport": "false"
                }
            }
        }
    ]
}

* Required field

Configuration Source: AWS Blog

Additional Documentation:

AWS Documentation: Add/Edit S3 Bucket Policies (Manual Steps)
AWS Documentation: S3 Bucket Policy Language Overview
CloudFormation Reference Guide: S3 Bucket Policies
AWS CLI Command Reference Guide: S3 Bucket Policies

Configuration to create an S3 bucket with security configuration options including s3 block public access configuration, encryption, logging, and versioning

Configuration Item

Security Control

Domain

Configuration Packages

Solutions, Guides & Tools

Overview

Configuration Templates

Actions

Sources and Documentation