I wouldn't be surprised if they were using S3 presigned URLs[0]. I could imagine a Lambda based customer service app which would pull a customer's recordings fr

I wouldn't be surprised if they were using S3 presigned URLs[0]. I could imagine a Lambda based customer service app which would pull a customer's recordings from wherever they're stored, package them up, and then drop them in an S3 bucket and generate a presigned URL which gets returned to the customer service app. Then I would also not be surprised if a customer support rep just grabbed the wrong link. [0] https://docs.aws.amazon.com/AmazonS3/latest/dev/ShareObjectPreSignedURL.html https://docs.aws.amazon.com/AmazonS3/latest/dev/ShareObjectP...