Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
hypeatei
on Aug 8, 2024
|
parent
|
context
|
favorite
| on:
Critical vulnerabilities in 6 AWS services disclos...
> And s3 buckets are not scoped to an account
Never used AWS, but how does it handle auth for data plane operations then?
noctarius
on Aug 8, 2024
[–]
It handles authentication on a request basis (which was its own issue just a little while ago):
https://www.infoq.com/news/2024/05/aws-empty-s3-bucket-billi...
Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Never used AWS, but how does it handle auth for data plane operations then?