AWS S3 Bucket Policy Gone Wrong
Tags: aws, dataprotection, s3bucket, cloudsecurity
Published: 2018-12-14 16:23:18

---
title: AWS S3 Bucket Policy Gone Wrong
published: true
description: This Curious Dev was trying to play around with S3 bucket policy. Statutory warning - Curiosity kills. Never try this stunt while at work. 
tags: AWS, Data Protection, S3 Bucket, Cloud Security   
---
<img class="alignnone wp-image-1064" src="https://thepracticaldev.s3.amazonaws.com/i/7qxa6idakm6h4j5adxr3.png" alt="AWS S3 Bucket Policy Gone Wrong" width="689" height="471" />

<h3><span style="color: #000000;"> This "Curious Dev" was trying to play around with AWS S3 bucket policy.</span></h3>

<h4><span style="color: #000000;">*Statutory warning: Curiosity kills. Never try this stunt while at work. Organizations as big as</span> <a href="https://www.awsforbusiness.com/massive-us-pentagon-data-left-exposed-aws-s3/">U.S. Pentagon</a> <span style="color: #000000;">have faced the music because of this. </span></h4>

<span style="color: #000000;"> The ‘Principal’ element in the policy code specifies the user, account, service, or other entity that is allowed or denied access to a resource residing in AWS S3 bucket. There have been several cases reported across the world about how S3 buckets lead to data leakage. In most cases, that ‘star’ is the culprit.</span>

<span style="color: #000000;">For more information, visit AWS’</span> <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html#Principal">Principal</a> <span style="color: #000000;">page in the IAM User Guide. To know more about how to restrict Amazon S3 Bucket access to a specific IAM role, click</span> <a href="https://aws.amazon.com/blogs/security/how-to-restrict-amazon-s3-bucket-access-to-a-specific-iam-role/">here</a>.

<span style="color: #000000;">Share your experiences with us.</span>

---

<h4><span style="color: #000000;">Do check out TotalCloud Inc.'s new flagship feature Security Group View that will provide visual cues to security loopholes in real-time and in 3D space.</span> <a href="https://totalcloud.io/user-signup.html">Sign-up to try.</a> <span style="color: #000000;">Want to know how the visual cues to security renders,</span> <a href="http://blog.totalcloud.io/reinforce-aws-security-posture-multiple-levels-seconds/" target="_blank" rel="noopener">read this post</a><span style="color: #000000;">.</span></h4>

<span style="color: #000000;">Check out this video that gives a gist of <em><strong>AWS Security Group View</strong></em>:</span>

{% youtube jfJlbDXLd5Q %}

<span style="color: #000000;">Want a quick demo? <a href="http://tc.totalcloud.io/security-group-view-request-a-demo" target="_blank" rel="noopener">Click here</a>.</span>

<h4><span style="color: #000000;">Related Reading:</span></h4>
<h4><a href="http://blog.totalcloud.io/5-not-to-ignore-best-practices-for-aws-nacls-network-access-control-lists/">5 Not-to-Ignore Best Practices for AWS NACLs (Network Access Control Lists)</a></h4>
<h4><a href="http://blog.totalcloud.io/5-not-ignore-best-practices-aws-security-groups/">5 Not-to-Ignore Best Practices for AWS Security Groups</a></h4>

<span style="color: #000000;"> Note: Originally published at <a href="https://blog.totalcloud.io/aws-s3-bucket-policy-gone-wrong/" target="_blank" rel="noopener"> blog.totalcloud.io </a> on March 20, 2018.
</span>