Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 32112

For questions about securing the data stored in Amazon's S3 storage service or Amazon Simple Storage Service, vulnerabilities associated with it, mitigating the risks, etc...

7 votes
Accepted

What is the purpose of the expiration time in signed S3 urls?

The expiration time is there to limit the lifetime of the authorization to perform the allowed action by anyone in possession of the signed URL. The expiration time in a URL cannot be changed without …
Michael - sqlbot's user avatar
1 vote
Accepted

Getting file from Amazon s3 encrypted based on user

No, there isn't. S3's encryption services are for the data at rest inside, not outside, S3.
Michael - sqlbot's user avatar
2 votes

How to make S3 Presigned url single use only?

Solution #1 is viable but only if the source bucket is versioned and the Lambda function writes to a database that supports strongly consistent reads, because that's the only way you can tell authorit …
Michael - sqlbot's user avatar
6 votes
Accepted

Security of setting access to S3 bucket only from a particular website

Your intuition is correct in the most important way -- this is not, in any meaningful sense, "secure." But the way it's defeated is not quite what you envision. When you click a link on a web page, …
Michael - sqlbot's user avatar
3 votes

How to disclose an open S3 bucket?

The AWS documentation has a vulnerability reporting section. While what you are describing is not a vulnerability in the S3 infrastructure, I would be genuinely surprised if this was not still an app …
Michael - sqlbot's user avatar