News for hackers. Stuff that matters.

A comment on It's now possible to find the AWS Account ID for any S3 Bucket (private too). Parent comment

Re:It's now possible to find the AWS Account ID for any S3 B... by viraptor on Monday February 26, 2024 @04:39PM (#39517033)
It sure could. If you're sharding by id and have some per-shard resources, they could definitely get permissions to only accounts 12345*. (I'm not saying it's a good idea, just that once you're in that situation, you would pattern match on partial IDs)
[ Parent | on HN ]

There are no comments on this comment yet.