3 ms·
this is pretty brilliant, aws cli should sherlock this. when would you want write only?
by swyx 3mo ago
this is pretty brilliant, aws cli should sherlock this.
when would you want write only?
- simonw 3mo agoFor logging, in particular for an environment where you don't want a leaked credential to allow the deletion of any previously recorded files.
- Natfan 3mo agodoes write only prevent overwrites?
- simonw 3mo agoGood point, no it doesn't.
- Natfan 3mo agobut i suppose if you're prefixing your entries with enough entropy, it'd be quite difficult for adversaries to predict and overwrite files without an `ls` equivalent
- ufmace 3mo agoIt does effectively, if you turn on bucket versioning. I think write-only is worthwhile for database backups to guard against a ransomware compromise.