Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Severity : MediumCritical

Description : The ability to list s3 buckets, and get objects from them, should be restricted largely to people as compromising an EC2 with this privilege could lead to exfiltration of data.

...