AWS Discloses Security Incident Affecting S3 Buckets

Amazon Web Services (AWS) has disclosed a security incident involving misconfigured S3 buckets that may have exposed customer data. The company has notified affected customers and implemented additional safeguards.

What Happened

According to AWS, a configuration change in their S3 service inadvertently allowed unauthorized access to certain customer buckets. The issue affected:

• Approximately 2,300 customer accounts
• Data stored in the us-east-1 region
• A window of approximately 4 hours

AWS Response

AWS has taken the following steps:

1. Reverted the configuration change
2. Notified all affected customers
3. Implemented additional access controls
4. Launched an internal investigation

What You Should Do

If you use AWS S3, we recommend:

• Review your bucket access logs
• Enable S3 Block Public Access
• Implement bucket policies with least privilege
• Enable CloudTrail logging