Re:Intentionally Leaking AWS Keys
by markuman123 on Tuesday January 19, 2021 @03:13PM
(#25838250)
Nope, because you just get a 404, even on public buckets, because you have no access to the kms key.
[ Parent
| on HN ]
I know from your absolute conviction on this (coupled with LOTS of experience with people who have absolute conviction about stuff) that your own conviction is preventing you from seeing valid uses for this, and is potentially keeping you from seeing the 100% of the landscape you're professing about.
Re:Intentionally Leaking AWS Keys
by markuman123 on Tuesday January 19, 2021 @03:40PM
(#25838592)
Sorry, I cannot follow.
To be clear, I'm no aws advocate.
Re:Intentionally Leaking AWS Keys
by GauntletWizard on Tuesday January 19, 2021 @05:33PM
(#25839833)
There are real uses for AWS Buckets that are public and cost you money. Distributing files, acting as a webhost, anything that you’d use dropbox with link sharing for.
Yes, it sucks if someone randomly decides to download files from you all day. You should probably set your budget to alert and attempt to blacklist them when it happens. That’s rare, though, and aside from a few cases of actual malice, the convenience is worth the cost.
Re:Intentionally Leaking AWS Keys
by zaphirplane on Wednesday January 20, 2021 @05:40AM
(#25844808)
Not the poster, I assume their comment is in response to your
“Always”