[rwth-security] How an empty S3 bucket can make your AWS bill explode

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"How an empty S3 bucket can make your AWS bill explode"

--> "... S3 charges you for unauthorized incoming requests ..."

- "... Anyone who knows the name of any of your S3 buckets can ramp up your AWS bill as they like ..."

- "... Adding a random suffix to your bucket names can enhance security ..."

- "... When executing a lot of requests to S3, make sure to explicitly specify the AWS region ..."

--> enable CloudTrail logs

VG

Bernd

[0] https://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws...