this post was submitted on 30 Apr 2024
190 points (99.0% liked)

Programming

17450 readers
63 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

founded 1 year ago
MODERATORS
snowe@programming.dev
Ategon@programming.dev
MaungaHikoi@lemmy.nz
190
How an empty S3 bucket can make your AWS bill explode (medium.com)
submitted 6 months ago by lengau@midwest.social to c/programming@programming.dev
22 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] deegeese@sopuli.xyz 116 points 6 months ago (1 children)

“By design” AWS bills project owners for unauthorized calls to the public S3 API.

So what I’m reading from this is you can do a billing attack on anything hosted in AWS so long as you know one of their bucket names.

[–] bamboo@lemmy.blahaj.zone 53 points 6 months ago

Seriously, now that this is more widely known, it'll for sure be taken advantage of a lot, to the point AWS will begrudgingly protect their customers once the damage is done.