There are monitoring tools to alert on this situation and many like it. I use threatstack but there are several others. I think Cloudwatch can even do it. If y

There are monitoring tools to alert on this situation and many like it. I use threatstack but there are several others. I think Cloudwatch can even do it. If you want to be stupid simple you can use the utility mon. You have that curl a test file from the public URL and alert if you ever get it. Also, in what universe does it take more than five minutes to fix this? "Dude, you're leaking customer info from an S3 bucket", "Shit! Which one?", "customers-bucket", "OK fixed, postmortem scheduled"