Skip to content

Remediation of security issue by Datadog#16

Open
datadog-datadog-demo-org[bot] wants to merge 1 commit into
mainfrom
dir-20250130183859
Open

Remediation of security issue by Datadog#16
datadog-datadog-demo-org[bot] wants to merge 1 commit into
mainfrom
dir-20250130183859

Conversation

@datadog-datadog-demo-org
Copy link
Copy Markdown

This PR was automatically created by Datadog to remediate a security issue.

Finding: S3 buckets should have versioning enabled
Resource: iac-remediation-bucket

@bfung
Copy link
Copy Markdown

bfung commented Jan 30, 2025

It works~

Comment thread terraform/main.tf
Comment on lines +14 to +15
versioning_configuration {
status = "Enabled"
Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Infrastructure as Code Configuration Issue

'versioning_configuration.mfa_delete' is undefined and not null (...read more)

S3 bucket without MFA Delete Enabled. MFA delete cannot be enabled through Terraform, it can be done by adding a MFA device (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html) and enabling versioning and MFA delete by using AWS CLI: 'aws s3api put-bucket-versioning --versioning-configuration=Status=Enabled,MFADelete=Enabled --bucket=<BUCKET_NAME> --mfa=<MFA_SERIAL_NUMBER>'. Please, also notice that MFA delete can not be used with lifecycle configurations

View in Datadog  Leave us feedback  Documentation

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant