blob: c2c53e60e6aeaa5982f4111c081d35e9ec52eb45 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
# s3.py
import boto3
from tabulate import tabulate
def get_section(config):
profile = config["aws"].get("profile")
session = boto3.Session(profile_name=profile if profile else None)
client = session.client("s3")
buckets = client.list_buckets()["Buckets"]
rows = []
for bucket in buckets:
name = bucket["Name"]
public = "Unknown"
encrypted = "No"
try:
acl = client.get_bucket_acl(Bucket=name)
public = any(
grant["Grantee"].get("URI", "").endswith("AllUsers")
for grant in acl["Grants"]
)
except Exception:
public = "Error"
try:
enc = client.get_bucket_encryption(Bucket=name)
rules = enc["ServerSideEncryptionConfiguration"]["Rules"]
if rules:
encrypted = "Yes"
except client.exceptions.ClientError:
encrypted = "No"
rows.append([name, "Yes" if public else "No", encrypted])
table = tabulate(
rows, headers=["Bucket", "Public", "Encrypted"], tablefmt="simple_grid"
)
lines = [
"S3 Bucket Access Summary:",
f"[https://{config['aws'].get('region')}.console.aws.amazon.com/s3/home]",
table,
]
return "\n".join(lines)
|
