
Finding public S3 objects
There's lot of concern over public objects in S3 buckets [https://threatpost.com/leaky-amazon-s3-buckets-expose-data-of-netflix-td-bank/146084/] . Now Amazon gives you a way to lock down entire buckets [https://docs.aws.amazon.com/AmazonS3/latest/user-guide/block-public-access.html] - but what if you legitimately have a mix of public and private objects?