Amazon S3
Check bucket protection settings alongside changes to the code or infrastructure that uses them.
Read the bucket’s controls
For selected buckets, Proofline reads versioning status, public-access-block settings, S3’s policy-publicness verdict, and the configured default encryption algorithm.
The evidence distinguishes an explicit configuration from an unset setting. That distinction matters when reviewing a change that relies on a bucket default.
Review a change to stored data protection
A Terraform edit may change versioning or public-access controls. The bucket record gives the review an observed configuration to examine alongside the proposed declaration.
This source reads bucket configuration. It does not read objects or object keys, and it does not collect the bucket policy document or KMS key identifier.
Connect your AWS account
Choose the AWS account and region for the environment under review. Apply the connection’s scoped read-only role, verify access, and check the environment’s evidence coverage.
Get started with GitHub