5 ms·
that's the reason why should always use aws:kms encryption on s3.
by markuman123 6y ago
that's the reason why should always use aws:kms encryption on s3.
- QuinnyPig 6y agoWait what? This conflates two entirely unrelated things.
- markuman123 6y agoNope, because you just get a 404, even on public buckets, because you have no access to the kms key.
- naikrovek 6y agoI know from your absolute conviction on this (coupled with LOTS of experience with people who have absolute conviction about stuff) that your own conviction is preventing you from seeing valid uses for this, and is potentially keeping you from seeing the 100% of the landscape you're professing about.
- markuman123 6y agoSorry, I cannot follow. To be clear, I'm no aws advocate.
- GauntletWizard 6y agoThere are real uses for AWS Buckets that are public and cost you money. Distributing files, acting as a webhost, anything that you’d use dropbox with link sharing for. Yes, it sucks if someone randomly decides to download files from you all day. You should probably set your budget to alert and attempt to blacklist them when it happens. That’s rare, though, and aside from a few cases of actual malice, the convenience is worth the cost.
- zaphirplane 6y agoNot the poster, I assume their comment is in response to your “Always”
- tylermenezes 6y agoYou know that AWS is frequently used as (and has an entire product for use as) a CDN, right?
- markuman123 6y agousing s3 as a cdn is a complete different thing than leaking intentionally credentials.
- tylermenezes 6y agoHe "leaked" credentials which only allow reading, which makes it effectively the same thing as a CDN, except that instead of needing a URL, you need a tuple of URL and access token.