• Asrar SB
• Dr. Neelambike s

Cloud infrastructure misconfiguration remains a practical security concern because infrastructure definitions can contain permissive access controls, missing encryption, or insecure transport settings before deployment. This paper presents a prototype policy-enforced security framework for identifying Amazon Simple Storage Service (Amazon S3) misconfigurations in Infrastructure-as-Code (IaC). The framework combines Terraform, a lightweight Python input-generation layer, Open Policy Agent (OPA), and Rego policy rules. Two Terraform configurations were prepared: a secure configuration and an intentionally insecure configuration. The Python layer extracts six selected S3 security attributes from the Terraform source configuration and converts them into structured JSON. OPA evaluates the JSON against six policies covering public access control and restriction, server-side encryption, and secure transport. A test harness compares expected and actual policy violations and stores consolidated evidence in JSON and CSV formats. In the reported local evaluation, the secure configuration produced zero expected and zero actual violations, while the insecure configuration produced six expected and six actual violations. All six individual policy tests passed. A 100-repetition local benchmark produced a mean of 78.227 ms and a median of 61.632 ms for the secure input, and a mean of 51.441 ms and a median of 49.993 ms for the insecure input. These timings include OPA process startup and command-line overhead and therefore should be interpreted as preliminary end-to-end prototype measurements rather than pure policy-evaluation latency. The work demonstrates the feasibility of combining IaC and policy-as-code for repeatable S3 security validation while identifying evaluated Terraform plan integration and automated live deployment blocking as future extensions.

Infrastructure-as-Code, Amazon S3, Cloud Security, Misconfiguration, Open Policy Agent, Rego, Policy-as-Code, Terraform, DevSecOps

"Preventing Amazon S3 Cloud Storage Misconfiguration Using Infrastructure-as-Code: A Policy-Enforced Security Framework", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.13, Issue 10, page no.b898-b901, October-2026, Available :http://www.jetir.org/papers/JETIR2610195.pdf

"Preventing Amazon S3 Cloud Storage Misconfiguration Using Infrastructure-as-Code: A Policy-Enforced Security Framework", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.13, Issue 10, page no. ppb898-b901, October-2026, Available at : http://www.jetir.org/papers/JETIR2610195.pdf