Returns all publicly accessible S3 buckets to which the executor has access to view the ACL

Get-PublicS3Buckets.sh

#!/bin/bash

EMPTYGRANTS='{"Grants":[]}'

buckets=`aws s3api list-buckets --output json | jq -r '.Buckets[].Name'`

for bucket in $buckets; do

  acl=`aws s3api get-bucket-acl --bucket $bucket --output json | jq -c 'del(.Owner) | .Grants |= map( select(.Grantee.URI == "http://acs.amazonaws.com/groups/global/AllUsers") )'`

  if [ $acl != $EMPTYGRANTS ] ; then

    echo "$bucket"

  fi

done