Open cardosec

Case C4FC12 · Cloud · L1 Foundations

Public Storage Buckets

Practise as: Explain it
  1. 01 What is it?
  2. 02 How is it abused?
  3. 03 How do you stop it?
Practise this card
What a strong answer covers

Try it out loud first. Then check yourself:

  1. Buckets become public through bucket policies, ACLs, or long-lived shared links (e.g. SAS tokens with far-off expiry)
  2. Automated scanners find exposed buckets within hours; many large data leaks came from this, not hacking
  3. Enable account-level Block Public Access (or equivalent) and grant exceptions only through reviewed paths
  4. Serve public content via a CDN with origin access control rather than a public bucket
  5. Continuously detect with CSPM tooling and alert on policy changes that grant access to everyone

cardosec draws a security topic and gives you a clock: explain it out loud with no notes, then see what you covered and what you missed. Free during early access.