You are already using Netskope CSPM to monitor your AWS accounts for compliance.

To allow access from company-managed devices running the Netskope Client to only Amazon S3 buckets owned by the organization, the following configuration satisfies the requirements:

Steering Configuration:

Policy Type: Real-time Protection

Constraint: Storage

Bucket Condition: Bucket Does Match -ALLAccounts

Action: Allow

By configuring the policy to allow traffic from company-managed devices (Netskope Clients) to Amazon S3 buckets, the organization ensures that only buckets owned by the organization are accessible.

The -ALLAccounts condition ensures that both existing and future buckets are allowed.

This configuration aligns with the requirement to allow access to organization-owned buckets while blocking access to other buckets.

References:

Netskope Cloud Security

Netskope Solution Brief

Netskope Community