Code Smell 263 – Squatting
Don’t use guessable names in advance on mission-critical resources TL;DR: Secure your cloud resources by avoiding predictable naming patterns. Problems Predictable names Unauthorized access Data exposure risks Shadow resources Account takeovers Idor vulnerability Premature Optimization Solutions Use unique bucket names with dark keys Verify ownership on creation Secure resources fully Have indirections obfuscating real names … Read more