AWS On Air ft. AmazonS3 Bucket Owner Inforced setting
summary
Shows how Amazon S3 adds a Bucket Owner Inforced setting that can disable ACLs on buckets and objects, forcing access decisions to come solely from IAM policies. Demo uses the S3 console and the AWS CLI to inspect bucket and object ACLs, finds a second account holding write and read ACLs, and proves both accounts can read until the setting is enabled. Feature simplifies permissions and works as shown in the live CLI reads.
AI-written summary · about
related talks
19mManaging access to your Amazon S3 buckets and objects
19mS3 Block Public Access overview and demo
19mFoundations of data security
45mAmazon S3 encryption and access control best practices
38mSecuring Amazon S3 with guardrails and fine-grained access controls
26mAWS (mis)configuration from an attacker’s-eye view
31mScale Permissions Management With Attribute-based Access Control
24mThe Power of AWS Tags