AWS 'Bucket Monopoly' attacks could allow complete account takeover

Critical flaws across at least six Amazon Web Services cloud services could have allowed attackers to execute remote code, steal data, or even takeover a user's account without their knowledge, according to research presented today at Black Hat. Aqua Security's Nautilus team detailed the vulnerabilities, which have since been …

[Zippy´s Sausage Factory]

Basically, we need obfuscation for cloud bucket names, then? Easy enough to use a GUID in the name when you create it, I suppose, if someone can already predict your bucket name.

The only difficulty is persuaded corporate management who will say "no, this doesn't fit our corporate naming scheme, you must stick to it with no deviations!" And this is what we get as a result.

[martinusher]

The hash sounds a bit like a widely known password -- very secure, that!