Re:The AWS S3 Denial of Wallet Amplification Attack
by mikepurvis on Wednesday May 01, 2024 @05:17PM
(#40229558)
If it was a web application as stated in the GP, then it would indeed be egress as the request would be coming from a browser.
[ Parent
| on HN ]
Re:The AWS S3 Denial of Wallet Amplification Attack
by nicklecompte on Wednesday May 01, 2024 @05:24PM
(#40229666)
Yes, it was client-side JavaScript making the range requests, asking for a string of genomic data to render in the browser. It was only to give the scientists a pretty picture :) The EC2 costs were largely ElasticSearch for a different function, which never looked at the data in S3.