security

Weird S3 List Permission

2 minute read Published: 2021-06-20

S3's file storage system employs a flat namespace architecture, where all objects are stored as key-value pairs without hierarchical folders. While most interfaces simulate folder hierarchies using / as a path delimiter, this abstraction can introduce security risks when designing access policies for list operations.