Hacker News Reader

I always found it interesting that bucket names are a global resource and not per account (so there would be an account ID prefix in the URL)

View on HN

An account ID in the URL would a terrible idea security-wise. It might not matter for you, but there are scenarios where every bit of information is carefully collected and then put together in an attack attempt. While you may hear conflicting opinions on that, this post provides a decent summary:

https://www.plerion.com/blog/the-final-answer-aws-account-id...

I mean lambda urls have some kind of masking going om, but the docs still state it might be possible to determine the account ID:

> Lambda generates the <url-id> portion of the endpoint based on a number of factors, including your AWS account ID. Because this process is deterministic, it may be possible for anyone to retrieve your account ID from the <url-id>.

Reply on news.ycombinator.com