S3 buckets
All Keensafe buckets, with their region and access-control state.
| Bucket | Region | ACL | Objects | |
|---|---|---|---|---|
| keensafe-public-assets-eu-west-1 | eu-west-1 | public-read | 3 | policy |
| keensafe-private-backups-eu-west-1 | eu-west-1 | private | 6 | policy |
| keensafe-cti-feeds-eu-west-1 | eu-west-1 | public-read | 2 | policy |
| keensafe-customer-statements-prod | eu-west-1 | public-read | 3 | policy |
Misconfiguration: the bucket policy for
keensafe-private-backups-eu-west-1 currently grants s3:GetObject and s3:ListBucket to Principal: "*". The ACL flag on the bucket still says "private", so console-only audits miss it.