Hot answers tagged

3

Knowing an AWS account ID doesn't expose you to any attack in itself, but it can make it easier for an attacker to obtaining other compromising information. Rhino Security Labs demonstrate a potential compromise vector via misconfigured IAM roles in a blog post here: AWS account IDs uniquely identify every AWS account and are more sensitive than you ...


3

What can we do to stop the attack? The damage and the extent of the breach might be more than you think of. The email account that is tied to the Amazon account needs the same security steps implemented or re-implemented, like changing your passwords to one with a completely different set of characters & theme/nature and the setting up of 2FA. It is ...


2

Whenever you browse a website, your computer makes a connection to the site itself and to the servers hosting any resources requested by that website. I've seen sites that include literally dozens of 3rd party resources -- fonts, ads, tracking pixels, javascript, stylesheets, and images are just some of these resources. So to visit a site, you may make ...


1

Solution #1 is viable but only if the source bucket is versioned and the Lambda function writes to a database that supports strongly consistent reads, because that's the only way you can tell authoritatively whether you're doing it "only once for the first time." When you ask S3 about the existence of an object for the very first time ever using a ...


Only top voted, non community-wiki answers of a minimum length are eligible