4 ms·
I always found it interesting that bucket names are a global resource and not per account (so there would be an account ID prefix in the URL)
by rockwotj 2y ago
I always found it interesting that bucket names are a global resource and not per account (so there would be an account ID prefix in the URL)
- benterix 2y agoAn account ID in the URL would a terrible idea security-wise. It might not matter for you, but there are scenarios where every bit of information is carefully collected and then put together in an attack attempt. While you may hear conflicting opinions on that, this post provides a decent summary: https://www.plerion.com/blog/the-final-answer-aws-account-ids-are-secrets https://www.plerion.com/blog/the-final-answer-aws-account-id...
- rockwotj 2y agoI mean lambda urls have some kind of masking going om, but the docs still state it might be possible to determine the account ID: > Lambda generates the <url-id> portion of the endpoint based on a number of factors, including your AWS account ID. Because this process is deterministic, it may be possible for anyone to retrieve your account ID from the <url-id>.