S3 Bucket Monitoring – Are your private buckets private?

Hacker News

Hi HN, Shane and August here from Cronitor. We built this S3 monitoring feature and are excited to be launching it on HN today and hearing your feedback. A little backstory - a couple of months ago I was talking to a friend who works at a ~500 person company. They have a small development/IT team, but software development isn't their core business. In his second month on the job my friend was combing through S3 buckets to get a sense of what teams were using it. In doing so he came across a public bucket that contained both private customer and business data. It seemed clear to him that this bucket definitely should be private so he started asking around. It turned out an analyst in the finance department had asked someone they knew on the development team if they could make that bucket public so that they could pull data from it programatically. That person, not knowing any better, and wanting to help a more senior person at the company made the change and went on with their day. There have been so many examples of S3 buckets exposing private data[0], and this conversation made me realize that this was a perfect addition to our uptime monitoring service[1]. We use AWS lambdas that attempt to connect to your bucket in a couple of different ways to determine if there is any public access. It’s built on top of our existing Uptime Monitoring network by using Boto for these checks instead of our standard HTTP client. We check your buckets constantly and if a private bucket suddenly becomes public an immediate alert is sent to the right person. Let us know what you think! https://cronitor.io/s3-monitoring [0] https://businessinsights.bitdefender.com/worst-amazon-breaches [1] https://cronitor.io/uptime-monitoring

Visit product View on Hacker NewsApr 16, 2020

Share card

Actual performance

17points

1comments

Made the leaderboard

Launch Intel predictions

Analyze your own launch →

Hacker NewsStrong engagement from HN community · Strong signals: excited, exist, existing · Missing: https docs, just released, lua

80%80% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Product HuntOn track for Day 1 leaderboard · Strong signals: new, using · Missing: mac, agents, macos

77%77% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

Indie HackersFits the IH revenue-focused audience · Strong signals: started · Missing: supports, reddit linkedin, podcasting

76%76% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: month, way · Missing: mobile apps, ios, personal

40%40% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

32%32% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

17%17% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

S3-credentials, a tool for creating restricted S3 bucket credentials60%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

S3-credentials, a tool for creating restricted S3 bucket credentials

Hacker News1

Stree – tree view of S3 bucket62%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Stree – tree view of S3 bucket

Hacker News2

S3-OCR: Extract text from PDF files stored in an S3 bucket72%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

S3-OCR: Extract text from PDF files stored in an S3 bucket

Hacker News6

Bucketlist, for viewing the file and directory listing of an S3 bucket51%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Bucketlist, for viewing the file and directory listing of an S3 bucket

Hacker News2

BucketArchiver – A Lean Solution for S3 Bucket to Tarball Workflows71%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

BucketArchiver – A Lean Solution for S3 Bucket to Tarball Workflows

Hacker News1

Kev – S3 and Redis as Datastores (with Redis Indexing)60%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Kev – S3 and Redis as Datastores (with Redis Indexing)

Hacker News8

Cache for S354%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Cache for S3

Hacker News8

Turn your AWS S3 bucket into an image gallery63%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Turn your AWS S3 bucket into an image gallery

Hacker News4

Git-s3-push – Deploy your Git repo to an S3 bucket69%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Git-s3-push – Deploy your Git repo to an S3 bucket

Hacker News2

Uploom64%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Turn standard storage into a massive S3 bucket for $0

Indie Hackers1apis

Browse all products Analyze your launch