AWS S3 buckets have a unique attack surface and require external AWS credentials to properly assess. This tool checks S3 bucket-level permissions (authenticated and unauthenticated) that may allow data exposure. A review of our AWS Penetration Testing page may help provide context for this and other AWS vulnerabilities.

Usage of this tool is granted for buckets you are explicitly authorized to test.