loader gif

AWS Employee Flub Exposes S3 Bucket Containing GoDaddy Server Configuration and Pricing Models

AWS Employee Flub Exposes S3 Bucket Containing GoDaddy Server Configuration and Pricing Models (Breaches and Incidents)

AWS Employee Flub Exposes S3 Bucket Containing GoDaddy Server Configuration and Pricing Models Publicly accessible S3 bucket included configuration data for tens of thousands of systems, as well as sensitive pricing information. Included within that data store were documents that detailed configurations for tens of thousands of systems in the AWS cloud. "The bucket in question was created by an AWS salesperson to store prospective AWS pricing scenarios while working with a customer," an Amazon spokesperson said. While Amazon S3 is secure by default, and bucket access is locked down to just the account owner and root administrator under default configurations, the salesperson did not follow AWS best practices with this particular bucket.” Configuration information such as that detailed in the exposed documents could potentially provide attackers with a wealth of information, including data about hostname, operating system, memory, CPU, AWS region, and what the specific workloads were being used for.

loader gif