#cloudtrail

Customer exports found in a public S3 bucket: what shared responsibility really means

A researcher reported that CSV exports with customer emails were downloadable from an S3 bucket. The cause was a bucket policy granting public read, added years earlier for a static site. How we contained it, proved who accessed what, and locked down every bucket.