Detect AWS S3 Public Buckets using Splunk

video demonstrates how to detect AWS S3 buckets which can be accessed by anyone on the internet.

0:12 prerequisites
0:20 AWS policy
1:59 Sample s3 bucket policies
2:45 detection logic
4:04 why to detect s3 buckets that are exposed to public
5:32 demo

[MrAnkitmaster]

Good one 👏🏻 i need to see how we can detect AWS key custodian users who create the KMS keys in splunk? Is cloudtrail contains that data?