21–30 of 134 posts
Edit: Based on what I know, I'm pretty sure support will not be able see any of the customers data.
It’s hard to decipher the AWS Data Privacy policy:
https://aws.amazon.com/compliance/data-privacy-faq/
In section Who Owns Customer Content, it’s implied that AWS doesn’t access customers’ data:
“As a customer, you maintain ownership of your content, and you select which AWS services can process, store, and host your content. We do not access or use your content for any purpose without your agreement. We never use customer content or derive information from it for marketing or advertising.”
Here, the statement is we don’t access customer’s data without customer’s agreement. But customers do agree with ToS in which different statements might be included.
In another place it’s mentioned, if governments request, AWS will comply. Considering that governments obviously request access from cloud providers, and obviously require them not to disclose the backdoor, I came to the conclusion that governments have unconditional access to data held in data centers of companies such as Amazon, Google and Microsoft.
As for non-government access, there are claims that Amazon uses data or metadata to launch competing products. If I recall correctly, AWS may collect some data presumably to maintain and secure the platform and fight abuse. The counter argument is that, AWS will not risk a profitable business; but AWS is too big to be easily impacted and might act on good opportunities.
It would be great if people working in AWS or similar platforms could chime in.
So its completely Amazon's storage then? Given that and it's not your computer, so it also not your storage (even it is encrypted)? If all of the above is true, is it time to panic? Perhaps maybe that why the cloud is somewhat of a scam anyways?
Of course there are also risks with self hosting, depending on your competence and the service.
I have a Vm on the cloud I use for running nightly nmaps against my network range, when that breaks it’s not the end of the world, if the VM provider hikes the price, or goes bust, I can migrate it in an hour by running a script, thetr no sensitive information on there, it makes perfect sense to run on a VM.
Would I entrust my journalist’s files when they are investigating corruption in Amazon? No.
When I worked in aws, this is primarily used to check for permissions of an object. I know how dumb customers can be, for the most part this is used to see why a customer cannot delete a bucket or object those sort of things. I don't remember having ability to see actual customers data only metadata is accessible. Edit: Based on what I know, I'm pretty sure support will not be able see any of the customers data.
I find this insulting as a customer. Is AWS usually contemptuous of its customers?
I don't think I've ever called my customer "dumb", and working as a consultant I've seen all kinds of interesting things.
People make mistakes. They're always in a hurry. They may have a hard time understanding ambiguous, complex or incomplete documentation. The interface may be confusing and lead them to bad solutions. Come on, support is there to help.
Take it easy, shall we?
When I worked in aws, this is primarily used to check for permissions of an object. I know how dumb customers can be, for the most part this is used to see why a customer cannot delete a bucket or object those sort of things. I don't remember having ability to see actual customers data only metadata is accessible. Edit: Based on what I know, I'm pretty sure support will not be able see any of the customers data.
> I know how dumb customers can be I find this insulting as a customer. Is AWS usually contemptuous of its customers? I don't think I've ever called my customer "dumb", and working as a consultant I've seen all kinds of interesting things. People make mistakes. They're always in a hurry. They may have a hard time understanding ambiguous, complex or incomplete documentation. The interface may be confusing and lead the…
KMS Encrypted objects shouldn't be affected though
I have been looking into this lately for a company that wanted to host important data on AWS S3. I couldn’t find conclusive information in public domain. It’s hard to decipher the AWS Data Privacy policy: https://aws.amazon.com/compliance/data-privacy-faq/ In section Who Owns Customer Content, it’s implied that AWS doesn’t access customers’ data: “As a customer, you maintain ownership of your content, and you select…
Amazon's product people also don't look at third party seller statistics to decide which products to sell themselves. Until they got caught doing just that.
To assume that they don't look at data feels naive.
A German super market chain with online ambitions has a rule that nothing touching their pipeline can be hosted on AWS. Want to sell them SaaS? You can't run your nodes on AWS. I consider that to be reasonable.
It’s their servers, they can do whatever they want with them. What are you going to do about it they have physical access, you have an API key. Suggestion, if you want to secure your data don’t put it on other peoples computers, and for fucks sake don’t store your crypto keys on someone else’s computer.
That is a really false statement. This is why contracts, audits,... exists and they define what each party can and can't do. When in violation this could result in huge fines, loss of business,... You can also securely storage your data on other servers by using client-side encryption. Not every business/person has the means or knowledge to have their own datacenter.
I have been looking into this lately for a company that wanted to host important data on AWS S3. I couldn’t find conclusive information in public domain. It’s hard to decipher the AWS Data Privacy policy: https://aws.amazon.com/compliance/data-privacy-faq/ In section Who Owns Customer Content, it’s implied that AWS doesn’t access customers’ data: “As a customer, you maintain ownership of your content, and you select…
> AWS doesn’t access customers’ data Amazon's product people also don't look at third party seller statistics to decide which products to sell themselves. Until they got caught doing just that. To assume that they don't look at data feels naive. A German super market chain with online ambitions has a rule that nothing touching their pipeline can be hosted on AWS. Want to sell them SaaS? You can't run your nodes on AW…