---
type: post-synth-check
title: WAW042
description: S3 bucket missing a TLS-only bucket policy — deny requests over plaintext
id: WAW042
severity: error
category: post-synth
lexicon: aws
docs: https://intentius.io/chant/lexicons/aws/rules/
---
S3 bucket missing a TLS-only bucket policy — deny requests over plaintext

## Applies to

- [Bucket](/types/Bucket.md)
- [S3BucketPolicy](/types/S3BucketPolicy.md)
- [Type](/types/Type.md)