if S3 object versioning is not enabled, tampering of objects will not be recoverable. This increases likelihood of denial of service.

Remediation

resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
}

resource "aws_s3_bucket_acl" "example" {
  bucket = aws_s3_bucket.example.id
  acl    = "private"
}

resource "aws_s3_bucket_versioning" "versioning_example" {
  bucket = aws_s3_bucket.example.id
  versioning_configuration {
    status = "Enabled"
  }
}

Reference: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_versioning

Metadata

• Severity: informational
• Slug: s3-versioning-not-enabled

OWASP

• A05:2021: Security Misconfiguration