(no title)
Guzba | 1 year ago
I'm sure you can layer more rules to get it exactly right but I'd not be eager to layer on complex configuration through multiple service providers when it is avoidable, unless there is some very compelling overriding reason.
gfs|1 year ago
I'm no expert but to try and protect my own domain, I use a transform rule to match a subdomain and append "/file/$MY_BUCKET_NAME" to each request. This should return a 404 for anybody who tries to inject their own bucket in the path. I could be wrong of course.
[0]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket...
eropple|1 year ago
unknown|1 year ago
[deleted]
johnmaguire|1 year ago
Guzba|1 year ago
This looks like an awful lot of setup for "easily solved". Easily solved is what S3 does where this isn't even a problem.