STOP USING PREDICTABLE BUCKET NAMES: A FAILED ATTEMPT AT HACKING SATELLITES

Summary from the TLDR InfoSec newsletter

Jonathan Walker of Security Runners crawled through AWS documentation to create a list of all possible service buckets and determine if any were available for bucket namesquatting. During his research, Walker discovered buckets created for a large number of regions that didn't yet exist such as us-east-3. While ultimately unsuccessful at discovering an available bucket for namesquatting, Walker's discovery that AWS reserves buckets in a large list of uncreated regions to protect against attacks like this is interesting.