1. Adding an Amazon S3 Component

An Amazon S3 Component is added from the Web Console Manage Component screen and the steps to do this are as follows:

• From the Web Console Home screen, click the Settings icon

  

  (top right of the screen) to display the Admin Console

From here select Manage Components from the options on the left-hand side of the screen and the Manage Components screen will be displayed:

• From the Components section, click on the AWS S3 component and the Add Credential for AWS S3 window is displayed with the Component Credential category selected:

• Add the Server Name

• The specified name will appear in the ‘Server Name’ column for the All Environment Changes Report

• Add the AWS Access Key (see section 3.1 of this guide for information on how to create an Access Key)

• Add the AWS Secret Key (see section 3.1 of this guide for information on how to create a Secret Access Key)

• Click Next to continue

The Database Settings window is displayed.

Add the Database Settings as follows:

• Server Name – enter the name of the server

• Authentication Type – choose from either:

• Windows Authentication or

• SQL Authentication – add the User Name and Password

• Select to either Create database – enter the database name and click Test Connection to test the database connection

Or

• Select database – use the drop-down arrow to select the name of an existing database

• Click Finish

The added component will be displayed in the Manage Component window:

2. Viewing the Reports

2.1 All Environment Changes Report

The All Environment Changes Report will show all changes made to the AWS S3 Component.

To run the report:

• From the Web Console Home screen, select Lepide Auditor and the Lepide Auditor dashboard screen will be displayed

• From the Lepide Auditor menu at the top, select Reports

The Lepide Auditor Reports screen will be displayed:

From here, select the All Environment Changes Report:

To apply a filter for AWS S3:

Click the Filter icon:

• The Modify Filters dialog box is displayed

• Click the arrow to display the drop down menu:

• Select Component Name from the list

• Click the

  

  icon to display a list of components

• Click the arrow next to Filter Criteria and select Equals

From the list of components, select AWS S3:

• Click Apply, Apply to close the Modify Filter box and go back to the report screen

• Change the time period if required

• Click Generate Report

The example below shows the All Environment Changes Report with the AWS S3 filter applied:

2.2 The Open AWS S3 Buckets Report

An open AWS S3 bucket is called “open” because anyone can access the data in the bucket without authentication. This can be a major security risk, as anyone can view, download, or even delete the data in the bucket. So, because an open S3 bucket is a potential source of a data breach, it is important to have visibility over all open S3 buckets. This can be achieved by running the Open AWS S3 Buckets Report, part of the Lepide Data Security Platform.

2.2.1 Adding a Data Set and Running a Scan

Before the Open AWS S3 Buckets Report can be run, you will need to create a data set and run a Current Permissions Scan to have visibility over the current state of open buckets. This is done from the Lepide Main Console, and the steps are as follows:

To Add a Data Set:

From the icons on the left-hand side of the screen, click the Settings icon

• Select Current Permissions Scan Settings from the tree on the left-hand side of the screen

• Click the

  

  icon

The Data Set Information dialog box will be displayed:

• Enter a Data Set Name and an optional Description

• Click Next

The Component and Server Information dialog box will be displayed

Enter the following information:

• Component Name

• Server Name

• AWS Access Key

• AWS Secret Key

• Click Validate Information to validate the details which have been entered

• The Information validated successfully message box will be displayed:

• Click Ok

• Click Next

The Scan Options dialog box will be displayed:

• Choose the option you require:

  • Scan Now to run a scan immediately

  • Schedule Scan to specify when the scan should be run. Click Change Schedule to set the date and time for running the scan

• Click Finish

This will return to the Current Permission Scan Settings screen and the newly added Data Set will be listed:

• If Scan Now was selected, the scan will start immediately

Once the scan has run successfully, you can generate the Open AWS S3 Buckets Report

2.2.2 Running the Open AWS S3 Buckets Report

• From the Lepide Web Console Home screen, select Lepide Trust

• From the Lepide Trust menu, select Reports

• Expand Risk Analysis from the list of reports on the left-hand side

• Select Open AWS S3 Buckets

• Click Generate Report

The example below shows the Open AWS S3 Buckets Report: