Avoid Common Mistakes When Deploying Cloud-based Services
The Threat of Poor AWS S3 Buckets Security
If your organization uses Amazon Web Services (AWS), it is extremely important to understand AWS S3 buckets security. Configuring your S3 buckets the right way can mean the difference between business as usual and nearly catastrophic data leaks. If you’ve noticed in the past few years, AWS S3 data leaks are not uncommon – and it’s fairly probable that your organization is not immune to them. They have affected high-profile organizations like Verizon, Accenture, and several others in recent memory.
Further complicating matters, it’s almost impossible to discover whether or not your data was actually ever accessed. Should you believe you’ve been the target of a malicious entity, the detective work to determine the truth can be beyond frustrating.
It Doesn’t Have To Be This Way.
In this guide, I will review several security control options that AWS users can use to protect their data. Areas covered include:
- Provisioning and Access Controls
- Everyone and Authenticated Users
- Versioning and Multifactor Authentication Delete
- Logging and Monitoring
- Encryption
- Auditing
Become More Secure Today.
This guide serves as a thorough introduction to how you can avoid a disastrous AWS S3 bucket data leak. If you have any thoughts or suggestions on how we can improve our content, please don’t hesitate to email us or talk to us on Twitter.
Additional Resources from Bishop Fox
An Introduction to AWS Cloud Security
Investigating PrivSec Methods in AWS
Subscribe to Bishop Fox's Security Blog
Be first to learn about latest tools, advisories, and findings.
Thank You! You have been subscribed.
