3 ms·
AWS S3 scares the shit out of me. The company I worked for misconfiguration one of the buckets and allowed uploads. A couple of months later there was a bill f
by peterpost2 2y ago
AWS S3 scares the shit out of me.
The company I worked for misconfiguration one of the buckets and allowed uploads. A couple of months later there was a bill for $15k. Since apparently some spammers were using our service.
Which is OK for a company but I would not want to use it as a private individual.
- fhke 2y agoNotwithstanding the fact that this was a user misconfiguration, S3 allows you to configure public access blocks to prevent this sort of thing.
- endgame 2y agoThese days, you have to remove the public access block AND explicitly write a bucket policy (or set up deprecated ACLs) to allow public access.
- ksynwa 2y agoI have never had to use them directly but the use-now-pay-later model feels scary to me for the same reason. Maybe they allow setting the upper cap to the monthly bill (crossing which they don't serve you until you intervene) but I have never heard of it. On the other hand there are many stories extremely ballooned bills for some unforeseen reasons.
- leetrout 2y agoThey have "AWS Budgets" for alerting you if you go over an amount but no automatic stops.
- ranger_danger 2y agoNot using the budget reporting feature is the bigger issue here IMO and just highlights that the organization was poorly managed.
- peterpost2 2y agoWow you can figure all of that out from a single sentence?
- ranger_danger 2y agoYes, because not only was the projected cost not monitored, neither were changes to bucket security. They have entire suites of tools to monitor all of this stuff that is easily accessible.
- peterpost2 2y agoThis was back in 2006/2007 and the very first foray of that company into using cloud computing. Those tools you mentioned largely did not exist. And the UI's where a lot more confusing and less clear than they are now. Another question: does any mistake in configuration signal a mismanaged company to you?
- ranger_danger 2y agoWhen you said "S3 scares the shit out of me", to me that implied that you still to this day didn't know about those features. And no, mistakes do not necessarily signal a mismanaged company to me, but not knowing what you will be charged from one day to the next certainly smells like a bad policy to me.