4 ms·
I use Amazon S3 buckets, with the web server having an IAM user key with very limited access that only allows writes. No reads/listing. So if the web server g
by laurencei 5y ago
I use Amazon S3 buckets, with the web server having an IAM user key with very limited access that only allows writes.
No reads/listing.
So if the web server gets hacked, the hacker can only write to the bucket, but has no way to know what is already there or access anything in it.
- shortj 5y agoMake sure you have versioning turned on as well. Even if attackers can figure out your naming conventions and overwrite, you just go back to the first version and everything is good.
- runeks 5y agoWould be better if there were a “create/write to new file” permission which doesn’t allow overwriting existing files.