5 ms·
Or at the very least the requester should b charged for the failed auth.
by kolanos 2y ago
Or at the very least the requester should b charged for the failed auth.
- robertlagrant 2y agoHow is that possible? AWS can't bill anyone on the planet.
- kolanos 2y agoThis is an unauthorized S3 API request. If there is a valid access id and secret attached, bill them for the request.
- robertlagrant 2y agoI doubt that anyone's agreed to pay that. Also that there's often a valid access ID and secret. Also that the cost of scanning through all the client IDs across all secrets is worth the money.