Cloudfront S3 bucket file list by http request
0
I'm plan place files with long random names into S3, then get access over Cloudfront website. Is this securely: no way for getting file list using http request and leakage file names (there enough to have file name for reading file content)? I think there enough set Bucket policy only "Action": "s3:GetObject" for avoid bucket list outside?
질문됨 일 년 전478회 조회
1개 답변
- 최신
- 최다 투표
- 가장 많은 댓글
0
If the bucket policy only allows the CloudFront identity to GetObject, then a ListObjects will be denied. But this approach is really relying on Security through obscurity which is not considered secure by most standards bodies.
"System security should not depend on the secrecy of the implementation or its components."
관련 콘텐츠
- 질문됨 8달 전
AWS 공식업데이트됨 일 년 전- AWS 공식업데이트됨 2년 전
