One commonly overlooked area is the naming of S3 buckets. AWS S3 bucket names are global with predictable names that can be exploited by bad actors seeking to access or hijack S3 buckets.

The threat actors claimed to have stolen nearly eight terabytes of data from Otelier's Amazon AWS S3 bucket. Upon information and belief, the following types of sensitive information may have been ...