531
submitted 8 months ago by lemmyreader@lemmy.ml to c/security@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] Moonrise2473@feddit.it 13 points 8 months ago

Who said that?

Many other customers instead want to get that, maybe they are hosting images for their website on S3, or other public files that are meant to be easily found

If the file isn't meant to be public, then it's the fault of the webmaster which placed it on a public bucket or linked somewhere in a public page

Also: hosting files on Amazon S3 is super expensive compared to normal hosting, only public files that are getting lots of downloads should be using that. A document that's labeled for "internal use only" should reside on a normal server where you don't need the high speed or high availability of AWS and in this way you can place some kind of web application firewall that restricts access from outside the company/government.

For comparison, it's like taking a $5 toll road for just a quarter of mile at 2 am. There's no traffic and you're not in hurry, you can go local and save that $5

[-] goferking0 4 points 8 months ago

There's also the question of what happens if they just ignore the robots.txt file

this post was submitted on 07 Apr 2024
531 points (95.9% liked)

Security

5047 readers
5 users here now

Confidentiality Integrity Availability

founded 5 years ago
MODERATORS