A Python CLI that scans AWS S3 buckets for common security misconfigurations. Runs against live AWS or a local mock environment — no AWS account required to try it.
S3 buckets are one of the most common sources of cloud data leaks. This tool audits buckets and reports findings with severity ratings and remediation guidance.
| Check | Severity | What it looks for |
|---|---|---|
| Public access block | HIGH | All four Block Public Access settings enabled |
| Bucket ACL | CRITICAL | Grants to AllUsers or AuthenticatedUsers |
| Bucket policy | CRITICAL | Principal:* with no conditions |
| Default encryption | HIGH | Server-side encryption enabled by default |
| Versioning | MEDIUM | Object versioning enabled |
| Access logging | MEDIUM | Server access logging configured |
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
python s3_scanner.py --demo