[{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV2_AWS_6",
  "checkName": "Ensure that S3 bucket has a Public Access block",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "NETWORKING"
  ],
  "primaryCategory": "NETWORKING",
  "severity": "UNRATED",
  "findingFingerprint": "55f8e779cade9c71b9cb2a29e210cd9af32ab1d30a3ceb43c5389e420e9f9011",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3BucketHasPublicAccessBlock.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
},
{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV2_AWS_61",
  "checkName": "Ensure that an S3 bucket has a lifecycle configuration",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "LOGGING"
  ],
  "primaryCategory": "LOGGING",
  "severity": "UNRATED",
  "findingFingerprint": "72e77bb91f2de713551b60a340b9b4abb9507833d554bfec311b2f4d6c9d4db0",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3BucketLifecycle.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
},
{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV2_AWS_62",
  "checkName": "Ensure S3 buckets should have event notifications enabled",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "LOGGING"
  ],
  "primaryCategory": "LOGGING",
  "severity": "UNRATED",
  "findingFingerprint": "acb6862fb9fcd1e6b54bdfad844593d736bec3945aa99c8b17ea2dd7b281414b",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3BucketEventNotifications.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
},
{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV_AWS_144",
  "checkName": "Ensure that S3 bucket has cross-region replication enabled",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "GENERAL_SECURITY"
  ],
  "primaryCategory": "GENERAL_SECURITY",
  "severity": "UNRATED",
  "findingFingerprint": "ffb9f3e13a4f49241cf0bf200eb33ebf4b390d025422f1f05fe6450e88825c07",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3BucketReplicationConfiguration.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
},
{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV_AWS_145",
  "checkName": "Ensure that S3 buckets are encrypted with KMS by default",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "ENCRYPTION"
  ],
  "primaryCategory": "ENCRYPTION",
  "severity": "UNRATED",
  "findingFingerprint": "8e1b2f656efe777443b08df6d9e09152b6763dbff7783dbd63552731fd5aec08",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3KMSEncryptedByDefault.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
},
{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV_AWS_18",
  "checkName": "Ensure the S3 bucket has access logging enabled",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "LOGGING"
  ],
  "primaryCategory": "LOGGING",
  "severity": "UNRATED",
  "findingFingerprint": "2d3c4712748d12e7d12c5c404e1cd9270d887452e31cec9b6f3656363918b719",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3BucketLogging.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
},
{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV_AWS_20",
  "checkName": "S3 Bucket has an ACL defined which allows public READ access.",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "GENERAL_SECURITY"
  ],
  "primaryCategory": "GENERAL_SECURITY",
  "severity": "UNRATED",
  "findingFingerprint": "1affa58e43cf0f2e522ca5512be90f664891cf6be68020bcf9bca988860b9f4b",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3PublicACLRead.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
},
{
  "schemaVersion": 2,
  "scanId": "1a6ecc7588b446ffac006a3a56d56b32",
  "findingType": "IAC_MISCONFIGURATION",
  "policyProfile": "security",
  "framework": "terraform",
  "checkId": "CKV_AWS_21",
  "checkName": "Ensure all data stored in the S3 bucket have versioning enabled",
  "resource": "aws_s3_bucket.public_assets",
  "filePath": "main.tf",
  "lineStart": 1,
  "lineEnd": 4,
  "checkovCategories": [
    "BACKUP_AND_RECOVERY"
  ],
  "primaryCategory": "BACKUP_AND_RECOVERY",
  "severity": "UNRATED",
  "findingFingerprint": "0cba517ea8417aa3b6009c4685705ec505015d4defd2abfa03203fd47c8c3131",
  "policyReference": "https://github.com/bridgecrewio/checkov/blob/3.3.8/checkov/terraform/checks/graph_checks/aws/S3BucketVersioning.yaml",
  "result": "FAILED",
  "scannerVersion": "3.3.8"
}]