{
  "Service": "s3",
  "Rule": {
    "name": "s3-public-read-prohibited",
    "description": "Checks that S3 buckets do not allow public read access.",
    "priority": 1
  }
}