PLAY PODCASTS
S3 Bucket Versioning: Accessing Secrets in AWS

S3 Bucket Versioning: Accessing Secrets in AWS

Tech Unplugged · Sublimetechie

March 6, 20257m 29s

Audio is streamed directly from the publisher (content.rss.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.

Show Notes

These sources describe a security vulnerability involving publicly accessible Amazon S3 buckets and the exploitation of S3 bucket versioning. An attacker can enumerate S3 buckets without credentials, find older versions of files, and recover deleted files due to misconfigurations. The vulnerability is demonstrated through a scenario where a security team assesses a company's infrastructure. They discover and exploit exposed credentials in a Javascript file and a confidential Excel file by listing object versions and retrieving older versions or deleted items, thus highlighting how sensitive data can be exposed in S3 buckets. The documents also suggest defensive measures like least privilege and continuous monitoring, and the AWS CLI commands that are used in the attack