Kdas
Kdas

Reputation: 1

AWS S3 event notification on object permission change

Can you some one guide me how to setup an event notification for object level permission change.Currently notification available for read,write,delete etc.. But I am looking to setup a email trigger if some one changed access permission in an s3 object inside a bucket.

Upvotes: 0

Views: 370

Answers (1)

jarmod
jarmod

Reputation: 78653

There are two ways to deal with this kind of concern:

  1. Proactive: write IAM policies that prevent users from putting object with public access
  2. Reactive: use CloudWatch Events to detect issues and respond to them (see blog post)

Upvotes: 1

Related Questions