Free checklist
Private S3 Bucket Leak Checklist
The fixes from “Your Bucket Is Private. Your Data Isn't.” in one list. Use it on your own AWS account today.
Get the printable PDF
One email with the checklist, then a short note when a new video is out. No spam. Unsubscribe anytime.
Email signup opens soon. Meanwhile, follow on YouTube.
By signing up you agree to receive emails from The Sec Guy. See the privacy policy.
Checklist
What to check
- ACLs off: Object Ownership set to Bucket owner enforced
- Block Public Access ON at the account level
- CloudFront access scoped to the public prefix only
- No s3:ListBucket granted to CloudFront
- Presigned links expire in minutes, not days
- IAM roles instead of long-lived access keys