Jeff Barr: customers should not have to pay for unauthorized requests

https://twitter.com/jeffbarr/status/1785386554372042890
  • user avatar

    Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exactly how we’ll help prevent these charges shortly. #AWS #S3 How an empty S3 bucket can make your AWS bill explode - medium.com/@maciej.pocwie…

  • user avatar

    BTW I think the same happens for other services like Cloudfront, API gateway, Lambda and the WAF, and probably a few more.

  • user avatar

    Thank you for addressing it so quickly!

  • user avatar

    I potentially encountered a similar issue with API Gateway: CORS preflight requests are sent by browsers without headers, so you can't put them under an API usage plan with an API key. So far, I couldn't find out whether I'd be charged for these requests or not.

{
"by": "tosh",
"descendants": 4,
"id": 40215881,
"kids": [
40216222,
40218295,
40216441,
40216109,
40216076
],
"score": 32,
"time": 1714508850,
"title": "Jeff Barr: customers should not have to pay for unauthorized requests",
"type": "story",
"url": "https://twitter.com/jeffbarr/status/1785386554372042890"
}
{
"author": null,
"date": "2024-04-30T19:11:40.000Z",
"description": "Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exactly how we’ll help prevent these charges shortly. #AWS #S3 How an empty S3",
"image": "https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_200x200.jpg",
"logo": null,
"publisher": "Twitter",
"title": "Jeff Barr ☁️ (@jeffbarr) on X",
"url": "https://x.com/jeffbarr/status/1785386554372042890"
}
{
"url": "https://x.com/jeffbarr/status/1785386554372042890",
"title": "Jeff Barr ☁️ (@jeffbarr) on X",
"description": "Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exa",
"links": [
"https://x.com/jeffbarr/status/1785386554372042890",
"https://twitter.com/jeffbarr/status/1785386554372042890"
],
"image": "https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_normal.jpg",
"content": "<div><div><ul><li><div><article><div><div><a target=\"_blank\" href=\"https://x.com/jeffbarr\"><p><img alt=\"user avatar\" src=\"https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_normal.jpg\" srcset=\"https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_mini.jpg 24w, https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_normal.jpg 48w, https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_bigger.jpg 73w, https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_x96.jpg 96w, https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_reasonably_small.jpg 128w, https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_200x200.jpg 200w, https://pbs.twimg.com/profile_images/1516500629769768963/oic_gx9H_400x400.jpg 400w\" /></p></a></div><div><p><span>Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exactly how we’ll help prevent these charges shortly.\n</span><a target=\"_blank\" href=\"https://x.com/hashtag/AWS\">#AWS</a><span> </span><a target=\"_blank\" href=\"https://x.com/hashtag/S3\">#S3</a><span> \nHow an empty S3 bucket can make your AWS bill explode - </span><a href=\"https://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1\" target=\"_blank\">medium.com/@maciej.pocwie…</a></p></div></div></article></div></li><li><div><article><div><div><a target=\"_blank\" href=\"https://x.com/magheru_san\"><p><img alt=\"user avatar\" src=\"https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_normal.jpg\" srcset=\"https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_mini.jpg 24w, https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_normal.jpg 48w, https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_bigger.jpg 73w, https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_x96.jpg 96w, https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_reasonably_small.jpg 128w, https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_200x200.jpg 200w, https://pbs.twimg.com/profile_images/1926617165362323457/W_aDfxtE_400x400.jpg 400w\" /></p></a></div><div><p><span>BTW I think the same happens for other services like Cloudfront, API gateway, Lambda and the WAF, and probably a few more.</span></p></div></div></article></div></li><li><div><article><div><div><a target=\"_blank\" href=\"https://x.com/Lauramaywendel\"><p><img alt=\"user avatar\" src=\"https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_normal.jpg\" srcset=\"https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_mini.jpg 24w, https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_normal.jpg 48w, https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_bigger.jpg 73w, https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_x96.jpg 96w, https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_reasonably_small.jpg 128w, https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_200x200.jpg 200w, https://pbs.twimg.com/profile_images/1687033386244685824/wUW5LoLv_400x400.jpg 400w\" /></p></a></div><div><p><span>Thank you for addressing it so quickly!</span></p></div></div></article></div></li><li><div><article><div><div><a target=\"_blank\" href=\"https://x.com/gunnarmorling\"><p><img alt=\"user avatar\" src=\"https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_normal.jpg\" srcset=\"https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_mini.jpg 24w, https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_normal.jpg 48w, https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_bigger.jpg 73w, https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_x96.jpg 96w, https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_reasonably_small.jpg 128w, https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_200x200.jpg 200w, https://pbs.twimg.com/profile_images/1783052283539853312/NTe3feH-_400x400.jpg 400w\" /></p></a></div><div><p><span>I potentially encountered a similar issue with API Gateway: CORS preflight requests are sent by browsers without headers, so you can't put them under an API usage plan with an API key. So far, I couldn't find out whether I'd be charged for these requests or not.</span></p></div></div></article></div></li></ul></div></div>",
"author": "@jeffbarr",
"favicon": "https://x.com/favicon.ico",
"source": "x.com",
"published": "2024-04-30T21:49:32.000Z",
"ttr": 26,
"type": "article"
}