diff --git a/terraform/env/prod/storage.tf b/terraform/env/prod/storage.tf
index d42b352..9078227 100644
--- a/terraform/env/prod/storage.tf
+++ b/terraform/env/prod/storage.tf
@@ -5,9 +5,8 @@ module "s3" {
   environment = local.environment
   purpose     = "storage"
 
-  # Public read access (GET only) - AWS SDK로 업로드/삭제, 외부에서 읽기만 허용
-  enable_public_read         = true
-  enable_block_public_access = false # public read를 위해 비활성화
+  enable_public_read         = false
+  enable_block_public_access = true
   enable_versioning          = true
   enable_sse                 = true
   sse_algorithm              = "AES256"