Skip to main content

AWS_BrokenInheritance Job

The AWS_BrokenInheritance job highlights permissions in an AWS S3 bucket that differ from those assigned at the bucket level, those assigned directly on objects within the bucket.

Analysis Tasks for the AWS_BrokenInheritance Job​

Navigate to the AWS > 6.S3 Permissions > AWS_BrokenInheritance > Configure node and select Analysis to view the analysis tasks.

CAUTION: Do not modify or deselect the selected analysis tasks. The analysis tasks are preconfigured for this job.

Analysis Tasks for the AWS_BrokenInheritance Job

The following analysis tasks are selected by default:

  • Broken Inheritance – Permissions applied directly to AWS S3 Bucket Objects. Creates the AWS_BrokenInheritance_Details table accessible under the job’s Results node.
  • Broken Inheritance Summary – Summarizes permissions applied directly to AWS S3 Bucket Objects. Creates the AWS_BrokenInheritance_Summary table accessible under the job’s Results node.

Report for the AWS_BrokenInheritance Job​

In addition to the tables and views created by the analysis task, the AWS_BrokenInheritance job produces the following preconfigured report:

ReportDescriptionDefault TagsReport Element
Broken InheritanceThis report identifies permissions applied directly on files in AWS S3 Buckets.NoneThis report is comprised of the following elements: - Stacked Bar Chart – Displays top buckets by broken inheritance - Table – Shows buckets by broken inheritance - Table – Provides details on broken inheritance