stratiformdigital / serverless-s3-security-helper

Sets security minded settings on s3 buckets, including sls deployment buckets

serverless-s3-security-helper

Sets security related settings on s3 buckets.

Usage

...

plugins:
  - serverless-s3-security-helper

...

Background

This plugin set settings on all S3 buckets. These are settings that are commonly required for security compliance. It handles severless deployment buckets as well as buckets created by a service.

Currently, the plugin:

• enables versioning for objects
• blocks all public access on the bucket, by default

This plugin has two hooks:

• package:createDeploymentArtifacts
• package:compileEvents

At each step, the buckets are set to be configured properly. This ensures the serverless deployment bucket is configured properly throughout its entire lifecycle.

License

See LICENSE for full details.