Reference & Evidence Shortcuts1 items

• Screenshots: control settings + policy code + audit logs (before/after).
• Exports: policy JSON/YAML, key policies, bucket policies, CA rules, SIEM detections.
• CLI proofs: minimal commands to list effective settings (attach in tickets).

aws s3api get-public-access-block --bucket <name>
az storage account show --name <acct> --query "allowBlobPublicAccess"
gcloud storage buckets describe gs://<bucket>

• CIS Benchmarks
• DISA STIGs/SRGs