Amazon S3
Named by 11 kept items in this workspace.
6 items name it under affected products, 3 under tools and 2 under classification.technologies.
The items that name it 11
SPIRE BundlePublisher plugin target for publishing trust bundles, decoupling bundle access from SPIRE server availability and enabling versioning
bucket used for tool staging
object storage; subject of over-permissioned access detection and remediation
Block Public Access provides four settings for access points, buckets, accounts, and organizations; overrides bucket policies and permissions that would otherwise allow public access
Public Block Access not enabled at account level in sandbox, but default enabled at bucket level for new buckets; public buckets could still be created by disabling bucket-level block
Object storage used for log archive, artifact staging, Terraform state backend, billing exports
Simple Storage Service
Bucket policy, ACL, public access block, ownership controls; off-by-default collector due to cost, capped at 1,000 objects per bucket
Victim's S3 buckets were enumerated, checked for versioning/replication/logging configuration, and then deleted by the attacker; bucket versioning was not enabled
In every workspace you can read 13
Security
All technologies in this workspace.