Question 1

Is block_public_acls enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 2

Is block_public_policy enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 3

Is ignore_public_acls enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 4

Is logging enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, AWS Simple Storage Service (AWS S3) server access logging provides a method to monitor the network for potential cybersecurity events.

Question 5

Is object_ownership enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, This control checks whether AWS S3 bucket ACL allow access to all authenticated users.

Question 6

Is replication_configuration enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, AWS Simple Storage Service (AWS S3) Cross-Region Replication (CRR) supports maintaining adequate capacity and availability.

Question 7

Is restrict_public_buckets enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, Manage access to resources in the AWS Cloud by ensuring that AWS Simple Storage Service (AWS S3) buckets cannot be publicly accessed.

Question 8

Is server_side_encryption_configuration enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, To help protect data at rest, ensure encryption is enabled for your AWS Simple Storage Service (AWS S3) buckets.

Question 9

Is versioning enforced for FedRAMP Low Baseline Rev 4?

Accepted Answer

Yes, AWS Simple Storage Service (AWS S3) bucket versioning helps keep multiple variants of an object in the same AWS S3 bucket.

AWS S3 bucket Terraform module