TF 0285 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

S3 Data should be versioned

Property Value
Language terraform
Severity medium
Service s3
Provider AWS
Vulnerability Type omission

Description

S3 buckets are configured without versioning enabled, meaning object changes or deletions permanently overwrite or remove previous data with no way to recover prior versions.

Impact

If an object is accidentally or maliciously deleted or modified, the original data cannot be restored, increasing the risk of data loss or service disruption and potentially impacting business continuity or compliance requirements.

Resolution

Enable versioning to protect against accidental/malicious removal or modification