Ravi Sir's Cards › AWS
Why Condition on ListBucket?
This interview card answers: Why Condition on ListBucket? ListBucket is a bucket-level action — restrict with s3:prefix so users only list their folder. Without it, users may enumerate others’ keys. List home/bob with Alice , then deny.
Read card text
What this card says
What it is
ListBucket is a bucket-level action — restrict with s3:prefix so users only list their folder.
s3:prefix
Why it matters
Without it, users may enumerate others’ keys.
How / example
List home/bob with Alice → deny.