This bash script checks which AWS S3 buckets are publicly accessible

checkBucket.sh

#!/bin/bash

# Check if an argument (file path) is provided
if [ $# -ne 1 ]; then
    echo "Usage: bash $0 /path/to/buckets.txt"
    exit 1
fi

BUCKET_FILE="$1"

# Check if the file exists
if [ ! -f "$BUCKET_FILE" ]; then
    echo "Error: File '$BUCKET_FILE' not found!"
    exit 1
fi

# Loop through each bucket in the file
while IFS= read -r bucket_name; do
    if [ -z "$bucket_name" ]; then
        continue  # Skip empty lines
    fi

    echo "Checking bucket: $bucket_name"

    # Run AWS CLI command and capture both stdout and stderr
    output=$(aws --no-sign-request s3api list-objects-v2 --bucket "$bucket_name" 2>&1)

    # Determine response type
    if [[ "$output" == \{* ]]; then
        echo "✅ Accessible: $bucket_name"
    elif echo "$output" | grep -q "AccessDenied"; then
        echo "⛔ Access Denied: $bucket_name"
    elif echo "$output" | grep -q "NoSuchBucket"; then
        echo "❌ No Such Bucket: $bucket_name"
    else
        echo "⚠️ Unknown Error: $bucket_name"
        echo "   Message: $output"
    fi

done < "$BUCKET_FILE"