Ravi Sir's Cyber Security Cards › Comparison Cards
S3 public website versus accidental public bucket?
S3 public website versus accidental public bucket? S3 is Amazon’s file storage. A bucket is a folder there. Public website : you choose to make a bucket public, on purpose, to host a website. Accidental public bucket : private files become public by mistake. A public website is a reviewed design cho
Read card text
What this card says
What each one is
S3 is Amazon’s file storage. A bucket is a folder there.
Public website: you choose to make a bucket public, on purpose, to host a website.
Accidental public bucket: private files become public by mistake.
The difference
A public website is a reviewed design choice.
An accidental public bucket is a data breach.
Example
Good: product images for a public shop site, reviewed.
Bad: customer invoices readable by anyone with the link.
Safe default
Keep Block Public Access ON.
If files must be public, serve them through CloudFront (Amazon’s content network).
Learn more in the lesson: 47.6 Cloud and AWS Security MNC Themes