Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
For questions about securing the data stored in Amazon's S3 storage service or Amazon Simple Storage Service, vulnerabilities associated with it, mitigating the risks, etc...
7
votes
Accepted
What is the purpose of the expiration time in signed S3 urls?
The expiration time is there to limit the lifetime of the authorization to perform the allowed action by anyone in possession of the signed URL.
The expiration time in a URL cannot be changed without …
1
vote
Accepted
Getting file from Amazon s3 encrypted based on user
No, there isn't.
S3's encryption services are for the data at rest inside, not outside, S3.
2
votes
How to make S3 Presigned url single use only?
Solution #1 is viable but only if the source bucket is versioned and the Lambda function writes to a database that supports strongly consistent reads, because that's the only way you can tell authorit …
6
votes
Accepted
Security of setting access to S3 bucket only from a particular website
Your intuition is correct in the most important way -- this is not, in any meaningful sense, "secure."
But the way it's defeated is not quite what you envision.
When you click a link on a web page, …
3
votes
How to disclose an open S3 bucket?
The AWS documentation has a vulnerability reporting section.
While what you are describing is not a vulnerability in the S3 infrastructure, I would be genuinely surprised if this was not still an app …