S3 Block Public Access overview and demo
summary
Live demo walks through a bucket without Block Public Access, adds a bucket policy to share with another AWS account, flips on S3 Block Public Access and proves unauthenticated and cross-account GETs return 403, then shows the console rejecting a new public policy. It uses the S3 console, CLI get-caller-identity and curl, and IAM Access Analyzer previews, explains the four granular settings, shows the account-level block option and that it blocks public requests and policy edits, and recommends CloudFront for public websites.
AI-written summary · about
chapters (5)
- 0:00Introduction to S3 Block Public Access
- 1:06Demo begins with S3 bucket setup
- 9:19Turning on Block Public Access
- 14:09Account-level Block Public Access settings
- 17:15Security and agility benefits summary
related talks
05mAWS On Air ft. AmazonS3 Bucket Owner Inforced setting
52mIAM policy power hour
45mAmazon S3 encryption and access control best practices
38mEstablishing a Data Perimeter on AWS
26mAWS (mis)configuration from an attacker’s-eye view
43mThink like a HACKER
17mBuild, deploy, and manage your applications securely with AWS
55mUsers and their data: Modern access and audit patterns on AWS