News for hackers. Stuff that matters.

A comment on AWS Support able to access any S3 object due to permission change. Parent comment

Re:AWS Support able to access any S3 object due to permissio... by cateof on Thursday December 23, 2021 @05:10AM (#29660398)
Objects encrypted with S3-managed encryption keys (SSE-S3) are affected, as these keys are set up with a non-configurable resource policy granting the S3 service decryption permissions.
[ Parent | on HN ]

There are no comments on this comment yet.