By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Update your S3 object access to maintain connectivity - I'm clueless!

0

Hi, I use an S3 bucket only to host pdf files for my members to download. I just received an email saying:

"We are reaching out because there are TLS 1.0 or TLS 1.1 connections to Amazon Simple Storage Service (Amazon S3) objects hosted in your account. As AWS is updating the TLS configuration for all AWS API endpoints to a minimum of version TLS 1.2 [1], you must take action as soon as possible for these connections to maintain their access to your S3 objects."

My first question is, if I do nothing does that mean that soon my members will get broken links when they click to download course materials?

My second question is do I need to hire someone to take care of this for me? All of the information I've read on this is way too technical for me to follow. I have no idea what I'm supposed to do. I did search for other questions relating to this but the answers were impossible for me to understand too.

Can anyone help with these questions? Thank you in advance for helping out a confused non-tech!

Topics
StorageSecurity, Identity, & ComplianceAWS Well-Architected Framework
Tags
Amazon Simple Storage ServiceSecurity, Identity, & ComplianceStorageSecurity
Language
English
jools209
asked a year ago710 views
1 Answer
2
Accepted Answer

There are a few other posts on this topic, the most recent is about CloudFront but the discussion is still relevant: https://repost.aws/questions/QU0ADWK6e3TIKz8CFldhHQVw/what-are-tls-1-0-or-tls-1-1-connections-and-cloudfront#ANwPP-u7f5SI2lxTQlUBZeZQ

In this case, it entirely depends on how your users are connecting to the bucket. If you have made the objects public and the users are connecting with a web browser then there shouldn't be any issue - the browsers will happily negotiate the "better" protocol (TLS 1.2) and it'll all be invisible. The exception will be any users with an ancient web browser - of which (in the modern world) there will hopefully be none. For them: They need to update - and that's a good update to make because they'll be running insecure software anyway.

However, if your users are connecting using any other tools (such as the AWS command-line tool - but there are many others) then they do need to upgrade immediately. I'm pretty sure (given your description) that this is not how your users are connecting but just in case...

profile pictureAWS
EXPERT
Brettski-AWS
answered a year ago
profile pictureAWS
EXPERT
Tushar_J
reviewed a year ago
profile picture
EXPERT
Hiroki Takahashi
reviewed a year ago
  • jools209
    a year ago

    Thank you! This is exactly how my users are connecting so it's a huge relief to read this. Much, MUCH appreciated. This has been scrambling my brain. Thank you. :-)

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content