News for hackers. Stuff that matters.
Re:AWS Support able to access any S3 object due to permissio... by luckylion on Thursday December 23, 2021 @05:18AM (#29660432)
> AWS doesn’t access customers’ data

Amazon's product people also don't look at third party seller statistics to decide which products to sell themselves. Until they got caught doing just that.

To assume that they don't look at data feels naive.

A German super market chain with online ambitions has a rule that nothing touching their pipeline can be hosted on AWS. Want to sell them SaaS? You can't run your nodes on AWS. I consider that to be reasonable.

Re:AWS Support able to access any S3 object due to permissio... by helsinkiandrew on Thursday December 23, 2021 @05:59AM (#29660651)
Are you referring to third party seller sales on the amazon.com websites?

That's completely different and separate issue from AWS customer data (for example someone running e-commerce software on a linux VM).

3rd party seller sales pay Amazon commission on each sale - deciding which products are selling well is just a matter of Amazon doing a SQL call on their own sales database (much like a physical retailer may see what brands/products are selling well)

Re:AWS Support able to access any S3 object due to permissio... by lvs on Thursday December 23, 2021 @06:15AM (#29660737)
(S)he's just saying that Amazon's claims about their business practices can't be audited by anyone and are therefore unenforceable except by lawsuit on a timescale of years.
Re:AWS Support able to access any S3 object due to permissio... by jen20 on Thursday December 23, 2021 @05:45AM (#29660576)
AFAIK Walmart has that rule too.
Re:AWS Support able to access any S3 object due to permissio... by e1g on Thursday December 23, 2021 @08:17AM (#29661521)
Yes, they do - we pitched to them, and they said for our talks to continue we’d need to use another cloud (at least for their tenancy).
Re:AWS Support able to access any S3 object due to permissio... by geoduck14 on Thursday December 23, 2021 @09:17AM (#29661991)
They do have that rule. And my previous company boasted that they signed a contract with us even though we used AWS. It was a pretty big deal, IMHO.
Re:AWS Support able to access any S3 object due to permissio... by pixiemaster on Thursday December 23, 2021 @05:22AM (#29660457)
They started the Schwarz Group Cloud (Stackit), 8000 developers and yet not a single production ready service yet.
Re:AWS Support able to access any S3 object due to permissio... by darkwater on Thursday December 23, 2021 @05:33AM (#29660515)
Re:AWS Support able to access any S3 object due to permissio... by pixiemaster on Thursday December 23, 2021 @05:38AM (#29660542)
no, definitly not. but Lidl don‘t run a single production service on it yet.
Re:AWS Support able to access any S3 object due to permissio... by darkwater on Thursday December 23, 2021 @05:48AM (#29660585)
I guess you have inside information but my naive assumption, reading the website doc and guessing how this things work, is that Scwarz group created it on top of their already existing self-service infrastructure, they "just" opened to external customers. Or did they create it from scratch?
Re:AWS Support able to access any S3 object due to permissio... by the_monocle on Thursday December 23, 2021 @05:55AM (#29660625)
where do you got that 8000 developer number from? Sounds like a lot
Re:AWS Support able to access any S3 object due to permissio... by pixiemaster on Saturday December 25, 2021 @06:47AM (#29682492)
Re:AWS Support able to access any S3 object due to permissio... by the_monocle on Tuesday January 04, 2022 @10:14AM (#29795595)
You have misread, it talks about the open source platform OpenStack, and that over 8000 thousand developers work on OpenStack.
Re:AWS Support able to access any S3 object due to permissio... by openplatypus on Thursday December 23, 2021 @08:04AM (#29661436)
That's great. It is heart-warming to hear some businesses are taking this threat seriously.

We built are service in similar vain. Nothing can reside under authority on non-EU entity, and nothing can be hosted on servers owned by non-EU entity. This effectively removed AWS, Azure, GCP and Alibaba.

And still, we had plenty of choice.

We specifically picked “boring” cloud provider. No thrills cloud vendor which has core business in building infrastructure rather than snooping on customers.

Re:AWS Support able to access any S3 object due to permissio... by gbrayut on Thursday December 23, 2021 @10:16AM (#29662582)
Curious on your thoughts about the "Sovereign Cloud" features discussed at https://cloud.google.com/blog/products/identity-security/new...

Would having a 3rd party host the services in the EU meet your requirements? Or having data residency restrictions with strict key management, EU based support, and access transparency/approvals?

IMO Google is also taking this seriously, but I am genuinely curious if any off the above would meet your requirements.

Re:AWS Support able to access any S3 object due to permissio... by z3j4e on Thursday December 23, 2021 @05:23AM (#29660461)
> A German super market chain

Which one? I would like to support non-AWS-companies.

Re:AWS Support able to access any S3 object due to permissio... by detaro on Thursday December 23, 2021 @05:24AM (#29660469)
Lidl