Why do so many AWS security scanners skip S3 server access logging?
I've been reviewing several AWS security scanners while building one myself, and I noticed that many check public access settings, encryption, and bucket policies but don't appear to…