Skip to content

Glossary: Vulnerability, Asset and Change Management

Bucket policy

A JSON document of access rules for a bucket. A rule that allows the Principal "*" lets anyone in, which is how kc-backup-2025 let anyone download its files with s3:GetObject.

Where the book teaches it

Related terms

BucketACL (access control list)