Tag: cors-configuration

S3 Bucket Access Security for Multi-Tenant WordPress

I spent three days last quarter unfucking a multi-tenant agency infrastructure where a single compromised staging site wiped the entire shared object storage bucket. 1.2 terabytes of client media. Poof. Gone in four seconds because someone passed s3:* on resource:...