An empty S3 bucket can make your AWS bill explode

Comments (7)

Dylan16807 · 21h ago

(2024)

Previously: https://news.ycombinator.com/item?id=40203126

cactacea · 21h ago

I always recommend using random strings for bucket names. If you want/need it to be human readable then use a random suffix instead.

leptons · 21h ago

The article is from April 2024, and AWS announced it would stop stopped charging the account owner for bad/unauthorized requests to S3 as of May 2024.

https://aws.amazon.com/about-aws/whats-new/2024/08/amazon-s3...

awirth · 8h ago

It's been a year. Has it been disclosed what tool had this misconfiguration?

jauntywundrkind · 18h ago

One of the items off the Serverless Horrors submission from today.

https://serverlesshorrors.com/all/aws-13k/ https://news.ycombinator.com/item?id=45157110

As noted in comments, AWS no longer charges for bad/unarhorized requests. https://aws.amazon.com/about-aws/whats-new/2024/08/amazon-s3...

The Serverless Horrors submission has some pretty amazing scenarios in it. Truly scary surprises!

cutler · 20h ago

It's simple - stop using AWS ... or Azure ... or ... Follow DHH and learn to manage your own boxes.

spwa4 · 20h ago

TLDR: any kind of usage based billing, where you don't control the usage, will have issues of cost explosions. It doesn't matter much what it is exactly.

Get your own machines. Get colo instead of cloud.

Ask HN: How to take notes and learn from them?

Ask HN: How much can we trust open-source projects or our hardware?

Ask HN: Good resources for DIY-ish animatronic kits for Halloween?

Ask HN: Looking for headless CMS recommendation

Ask HN: Who wants to be hired? (September 2025)

Ask HN: Can an amateur make contributions to pure math or theoretical physics?

Ask HN: How to avoid passive use of AI?

Ask HN: Who is hiring? (September 2025)

Raku.org Chooses Htmx

Ask HN: Are api.nasa.gov, data.nasa.gov down or shutdown?

Ask HN: Is Reddit going the way of Stack Overflow?

Why the Technological Singularity May Be a "Big Nothing"

Ask HN: Significant reduction in AI related submissions?

Automated Workday check in/check out and Microsoft Teams messages monitoring

If AI agents take the jobs, who buys the stuff?

Ask HN: What do you think of the new Digg?

Ask HN: Why does Google word privacy settings like you agree even when off?

Ask HN: Moving from Dev to PM

Ask HN: How long did it take you to learn Git?

Ask HN: Is your company still hiring junior engineers?

New Member Alert

Ask HN: LLM struggles to center div too?

Ask HN: Useful AI applications in regular businesses?

Tell HN: My advice after I applied to 450 positions before getting hired

Ask HN: Why do LLMs struggle with word count?

A16Z scouting ambitious Swiss founders for $1M accelerator

ASIC: Proof-of-Concept Binary Optimizer Reduces Size, More to Come

Ask HN: How do you fight YouTube addiction and procrastination? I'm struggling

Ask HN: When was the last time you visited Stack Overflow?

Ask HN: VSCode AI Autocomplete Woes

File protection: anonymous, open source and fast

An empty S3 bucket can make your AWS bill explode

Comments (7)