s3_open_buckets_test.sh

# Check if the current org has S3 public buckets. 

for bucket in $(aws s3api list-buckets --query "Buckets[].Name" --output text); do
  echo "Checking bucket: $bucket"

  # Get the public access block
  pab=$(aws s3api get-bucket-policy-status --bucket "$bucket" 2>/dev/null)

  if echo "$pab" | grep -q '"IsPublic": true'; then
    echo "🚨 $bucket is PUBLIC"
  fi
done