Block all public access on Cache Bucket

samvera · Jul 15, 2022 · 5be56ee · 5be56ee
1 parent 4ae3639
commit 5be56ee
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/sam/cloudfront/template.yml b/sam/cloudfront/template.yml
@@ -166,6 +166,11 @@ Resources:
         Rules:
           - Status: Enabled
             ExpirationInDays: 1
+      PublicAccessBlockConfiguration:
+        BlockPublicAcls : true
+        BlockPublicPolicy : true
+        IgnorePublicAcls : true
+        RestrictPublicBuckets : true
   CacheBucketPolicy:
     Type: "AWS::S3::BucketPolicy"
     Properties: