4 ms·
uf, aws should definitly not count the requests against a bucket that is not configured for public use. Edit: if they do that, they should make it possible to
by merb 2y ago
uf, aws should definitly not count the requests against a bucket that is not configured for public use.
Edit: if they do that, they should make it possible to firewall buckets via ips so that they are only accessible via certain ips
- kolanos 2y agoOr at the very least the requester should b charged for the failed auth.
- robertlagrant 2y agoHow is that possible? AWS can't bill anyone on the planet.
- kolanos 2y agoThis is an unauthorized S3 API request. If there is a valid access id and secret attached, bill them for the request.
- robertlagrant 2y agoI doubt that anyone's agreed to pay that. Also that there's often a valid access ID and secret. Also that the cost of scanning through all the client IDs across all secrets is worth the money.