Ravi Sir's Cyber Security Cards › Interview Cards
Scenario: S3 bucket listing is public for "temporary marketing images". Response?
Scenario: S3 bucket listing is public for "temporary marketing images". Response? Turn on Block Public Access , remove public ACLs and policies, and stop serving files from an open bucket. Serve public images through CloudFront or a reviewed static-hosting setup, not a wide-open bucket. “‘Temporary
Read card text
What this card says
Short answer
Turn on Block Public Access, remove public ACLs and policies, and stop serving files from an open bucket.
Better way
Serve public images through CloudFront or a reviewed static-hosting setup, not a wide-open bucket.
Say it in the interview
“‘Temporary public’ buckets get forgotten and leaked. I use Block Public Access and CloudFront instead.”
Why it matters
Open buckets are a top cause of data leaks. Scan the bucket for anything sensitive before you move on.
Learn more in the lesson: 46.10 Scenario Round — Sahyadri / Raja-Rani