thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Foundational

S3 Block Public Access

Account- and bucket-level S3 settings that override policies and ACLs to prevent public access to buckets and objects.

Definition

Block Public Access provides four settings that block new and existing public ACLs and public bucket policies. Since April 2023 it is enabled by default on new buckets, and ACLs are disabled by default through the Bucket owner enforced Object Ownership setting.

Example

An organization enables Block Public Access at the account level so no developer can accidentally publish a bucket.

Exam tip

When asked how to prevent all public S3 exposure across an account, enable account-level Block Public Access (and enforce it with an SCP).

Related terms