An empty S3 bucket can make your AWS bill explode

Comments (7)

Dylan16807 · 19h ago

(2024)

Previously: https://news.ycombinator.com/item?id=40203126

cactacea · 19h ago

I always recommend using random strings for bucket names. If you want/need it to be human readable then use a random suffix instead.

awirth · 6h ago

It's been a year. Has it been disclosed what tool had this misconfiguration?

leptons · 19h ago

The article is from April 2024, and AWS announced it would stop stopped charging the account owner for bad/unauthorized requests to S3 as of May 2024.

https://aws.amazon.com/about-aws/whats-new/2024/08/amazon-s3...

jauntywundrkind · 16h ago

One of the items off the Serverless Horrors submission from today.

https://serverlesshorrors.com/all/aws-13k/ https://news.ycombinator.com/item?id=45157110

As noted in comments, AWS no longer charges for bad/unarhorized requests. https://aws.amazon.com/about-aws/whats-new/2024/08/amazon-s3...

The Serverless Horrors submission has some pretty amazing scenarios in it. Truly scary surprises!

cutler · 19h ago

It's simple - stop using AWS ... or Azure ... or ... Follow DHH and learn to manage your own boxes.

spwa4 · 18h ago

TLDR: any kind of usage based billing, where you don't control the usage, will have issues of cost explosions. It doesn't matter much what it is exactly.

Get your own machines. Get colo instead of cloud.

Computer Networking Fundamentals for Developers, DevOps, and Platform Engineers (labs.iximiuz.com)

Nova Launcher is shutting down (androidauthority.com)

Chartbook 407: Polycrisis Revisited (adamtooze.substack.com)

Men and Women and Apps = Bad Romance (nytimes.com)

RL-as-a-Service will outcompete AGI companies (and that's good) (lesswrong.com)

Stop Throwing Out Your Used Tea Bags (2020) (apartmenttherapy.com)

Microdosing GLP-1 drugs became a longevity 'craze' (washingtonpost.com)

Show HN: Pyziggy – Python code generator and runtime to work with Zigbee2MQTT (pyziggy.github.io)

WHO adds GLP-1 drugs for diabetes, others to essential medicines list (reuters.com)

19 Dead in Gen Z protests against CORRUPTION (not social media ban) across Nepal (kathmandupost.com)

StubHub eyes up to $9B valuation in US IPO (reuters.com)

The Intellectual Obesity Crisis (2022) (gurwinder.blog)

Bio-oil made with corn stalks, wood debris could plug orphaned fossil fuel wells (news.iastate.edu)

Ofcom to be 'summoned' to US court (thinkbroadband.com)

How come no one is noticing the great reset happening?

French datacenter biz signs 12-year nuclear pact with EDF (theregister.com)

Debug 4.4.2 published on NPM seems to contain cryptominer (github.com)

Show HN: Gimli Tailwind 5 -The most popular extension for TailwindCSS developers (gimli.app)

SpaceX buys wireless spectrum from EchoStar in $17B deal (reuters.com)

Five Dramatic Ways Animals Respond to Human Noise (smithsonianmag.com)

China's EV influence is spreading globally, except to the U.S. and Canada (fastcompany.com)

Show HN: Finding Focus with Hyperzoned (indiehackers.com)

Big Week for Tech IPOs with Klarna, Netskope, Stubhub, Figure and Gemini (ipochatter.com)

OpenAI comes for Hollywood with Critterz, an AI-powered animated film (theverge.com)

Top Sources (blog.google)

Databricks Raises $1B at a $100B Valuation (bloomberg.com)

Project Bob (projectbob.xyz)

You Have to Care (twitter.com)

Entropy – Favourite at Mind Sports Olympiad

Show HN: D-Tale, easy to use GUI for Pandas data structures (github.com)

MCP Config Manager – Stop manually editing JSON files for AI assistant tools (github.com)

Malicious code found in error-ex NPM package (47M weekly downloads) 30M ago (jdstaerk.substack.com)

Industrial Robotics Companies by Market Share (visualcapitalist.com)

Social media platforms including X, YouTube, WhatsApp are blocked in Turkey (mastodon.social)

'Old things work': Argentines giving new life to e-waste (taipeitimes.com)

Ask HN: How to take notes and learn from them?

Show HN: I Built a Cold Outreach Machine (dmpro.ai)

AlterEgo startup lets you query AI with silent speech (media.mit.edu)

Paleontologists Uncover Prehistoric Courtship (smithsonianmag.com)

SceneDex – Film and TV picks that match your vibe (scenedex.app)

Rootly joins Groq OpenBench with an SRE-focused benchmark (rootly.com)

Show HN: PromptDev – Prompt eval and testing for AI agents across providers (github.com)

New Open Source Agent Orchestration Framework for Agentic AI (github.com)

NPM package 'debug' v4.4.2 contains malware (social.hackerspace.pl)

Single-shot readout of the nuclear spin of an on-surface atom (nature.com)

Show HN: Hyperif – Forget MCPs, chat with your data across all your tools (hyperif.com)

Securing MCP Servers (corgea.com)

Show HN: Pluely v0.1.3 – Invisible Open Source AI Assistant with System Audio (pluely.com)

Show HN: Remoteweek.io – Software jobs where you can work from home (remoteweek.io)

Show HN: Docusaurus plugins to easily add 3rd-party scripts (github.com)

An empty S3 bucket can make your AWS bill explode

Comments (7)