Ran a scanner on our own site at 11pm and it lit up with 47 open S3 buckets

I was home in Boise poking at our staging setup with a free tool called ScoutSuite, mostly just bored, and it flagged 47 buckets sitting wide open. Turned out a former contractor flipped a flag in Terraform 8 months ago and nobody caught it. For the folks running scans on your own infra, do you gate your pipeline on findings like this or just triage by hand?

0 comments

Log in to join the discussion

Log In

0 Comments

No comments yet

Be the first to share your thoughts on this discussion.