Who's calling delete!

Just wondering if there is a way to trace down where delete calls are coming from? Nobody should be deleting anything in our buckets - but I've found 9 delete calls this week! thanks for your help!!

Michael Vafiadis

Wednesday, April 22, 2015

I'm afraid our reports can't drill down far enough to tell you where an individual request came from. You'd need to pull down your logs and sift through them directly, and even then the best they'd be able to tell you is the IP address that issued the request. It will more likely require an audit at your end to find where those calls might be coming from.

The best I can do to help is to remove S3stat itself from the list of possible culprits. We make a point of never issuing a delete command against your endpoints. That's partly for your safety, but mostly for my peace of mind, since I don't want to consider the possibility of having a mistake on my part turn into a catastrophic loss for a user. There's not a single delete command in our codebase, and the IAM Policy we provide as a template does not include any delete verbs in its list of allowed actions (meaning we couldn't even delete anything if we tried).


Regardless, I wish you luck in your search. Sorry we couldn't be more help.

Jason Kester

Thursday, April 23, 2015

[ reply to this topic ]   [ return to topic list ]

© 2024 Expat Software Back to Top