[aws-s3] Enforce AWS Foundational Security Best Practice

It would be nice to have the ability to enforce AWS Foundational Security Best Practice through CDK.

Use Case

When creating s3 buckets AWS FSBP should be followed.

Proposed Solution

      new s3.Bucket(stack, 'MyBucket', {
        enforceSecurityBestPractice: true,
      });

And behind the scenes it will block all public access and enforce data transmission over HTTPS.

A PR is ready to go which introduces a simple way of adding these controls for s3 buckets.

Other

This is really just to get the conversation started around enforcing the AWS FSBP controls as a default for CDK and perhaps this could be a first step into helping prevent AWS users from using defaults which are not secure.

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[hoegertn]

Instead of adding enforcement options to all resources I would love to have an aspect for this that traverses all resources in the stack.

[github-actions[bot]]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see. If you need more assistance, please either tag a team member or open a new issue that references this one. If you wish to keep having a conversation with other community members under this issue feel free to do so.