S3 Bucket Misconfiguration Exploit

An automated scanner discovered and attempted to access a misconfigured S3 bucket with public read permissions. The Cloud Agent detected the misconfiguration during routine cartography and fixed it 12 minutes before the scanner found it. The scanner received access denied responses for all objects. The bucket policy has been permanently corrected and an SCF guard rule prevents future public bucket creation.