AWS Support able to access any S3 object due to permission change

Post by z3j4e » Thu, Dec 23, 2021, 10:23 AM UTC

luckylion wrote: post #27

aborsy wrote: post #22

I have been looking into this lately for a company that wanted to host important data on AWS S3. I couldn’t find conclusive information in public domain. It’s hard to decipher the AWS Data Privacy policy: https://aws.amazon.com/compliance/data-privacy-faq/ In section Who Owns Customer Content, it’s implied that AWS doesn’t access customers’ data: “As a customer, you maintain ownership of your content, and you select…

> AWS doesn’t access customers’ data Amazon's product people also don't look at third party seller statistics to decide which products to sell themselves. Until they got caught doing just that. To assume that they don't look at data feels naive. A German super market chain with online ambitions has a rule that nothing touching their pipeline can be hosted on AWS. Want to sell them SaaS? You can't run your nodes on AW…

Post by cgio » Thu, Dec 23, 2021, 10:25 AM UTC

trzmiel4 wrote: post #24

twosugars wrote: post #21

When I worked in aws, this is primarily used to check for permissions of an object. I know how dumb customers can be, for the most part this is used to see why a customer cannot delete a bucket or object those sort of things. I don't remember having ability to see actual customers data only metadata is accessible. Edit: Based on what I know, I'm pretty sure support will not be able see any of the customers data.

> I know how dumb customers can be I find this insulting as a customer. Is AWS usually contemptuous of its customers? I don't think I've ever called my customer "dumb", and working as a consultant I've seen all kinds of interesting things. People make mistakes. They're always in a hurry. They may have a hard time understanding ambiguous, complex or incomplete documentation. The interface may be confusing and lead the…

Post by pixiemaster » Thu, Dec 23, 2021, 10:38 AM UTC

darkwater wrote: post #34

pixiemaster wrote: post #30

Earlier quoted context omitted.

They started the Schwarz Group Cloud (Stackit), 8000 developers and yet not a single production ready service yet.

So, is this fake? https://www.stackit.de/en/cloud/products-services/

Post by jen20 » Thu, Dec 23, 2021, 10:45 AM UTC

luckylion wrote: post #27

aborsy wrote: post #22

I have been looking into this lately for a company that wanted to host important data on AWS S3. I couldn’t find conclusive information in public domain. It’s hard to decipher the AWS Data Privacy policy: https://aws.amazon.com/compliance/data-privacy-faq/ In section Who Owns Customer Content, it’s implied that AWS doesn’t access customers’ data: “As a customer, you maintain ownership of your content, and you select…

> AWS doesn’t access customers’ data Amazon's product people also don't look at third party seller statistics to decide which products to sell themselves. Until they got caught doing just that. To assume that they don't look at data feels naive. A German super market chain with online ambitions has a rule that nothing touching their pipeline can be hosted on AWS. Want to sell them SaaS? You can't run your nodes on AW…

Post by helsinkiandrew » Thu, Dec 23, 2021, 10:53 AM UTC