diff --git a/cfngoat.yaml b/cfngoat.yaml
index 2310f870..65048403 100644
--- a/cfngoat.yaml
+++ b/cfngoat.yaml
@@ -627,6 +627,8 @@ Resources:
       Tags:
         - Key: Name
           Value: !Sub "${AWS::AccountId}-${CompanyName}-${Environment}-operations"
+      PublicAccessBlockConfiguration:
+        RestrictPublicBuckets: True
 
   DataScienceBucket:
     # not encrypted