Ravi Sir's Cards › AWS
Block Public Access and policy
This revision card explains Block Public Access and policy. A perfect public policy still fails if BPA blocks public policies/ACLs. It describes plan which BPA flags to clear; never open write; prefer policy over ACL. The how-to section notes turn off BlockPublicPolicy, put policy, keep BlockPublicAcls if unused. An example on the card is sofia Alvarez sees AccessDenied until BPA allows the bucket policy.
Read card text
What this card says
Why do we need it?
A perfect public policy still fails if BPA blocks public policies/ACLs.
BPA
What is it?
Plan which BPA flags to clear; never open write; prefer policy over ACL.
How to do it
Turn off BlockPublicPolicy, put policy, keep BlockPublicAcls if unused.
Example
Sofia Alvarez sees AccessDenied until BPA allows the bucket policy.