this is pretty brilliant, aws cli should sherlock this.
when would you want write only?
back
1 comments
For logging, in particular for an environment where you don't want a leaked credential to allow the deletion of any previously recorded files.
does write only prevent overwrites?
It does effectively, if you turn on bucket versioning.
I think write-only is worthwhile for database backups to guard against a ransomware compromise.
Good point, no it doesn't.
but i suppose if you're prefixing your entries with enough entropy, it'd be quite difficult for adversaries to predict and overwrite files without an `ls` equivalent