githubEdit

S3 Checklist

  • Storage system that allow users to store and retrieve data.

  • List,Get,Put and Delete operations can be performed on the objects of the bucket

  • Buckets are global, meaning that they are available to all regions

  • It's possible to bruteforce the bucket name and region in the URL

  • Its possible to apply ACL's to bucket and object level and bucket policies for bucket level

  • There is also time limited URL's and identity based policies

  • Identity policies are enumerated using IAM commands

Last updated