Why do so many AWS security scanners skip S3 server access logging?
While reviewing several AWS security scanners—and building one myself—I noticed that many check public access, encryption, and bucket policies but don't check whether S3 server access logging is…