It’s Raining Buckets: The Importance of Cloud Storage Configurations

This blog post demonstrates how misconfigured Amazon S3 buckets — especially those granting the 'Authenticated Users' group access — can result in data exposures. It walks through creating a bucket, setting ACLs, shows how an attacker can discover and copy files via the AWS CLI, cites historical breaches and prevalence data (~8.5% exposed in Censys ASM), and recommends IAM best practices, NIST guidance, and automated ASM detection to mitigate risk.