[gtsteve]

Interesting, thanks. I guess I didn't consider it because I've never deleted a S3 bucket. We've got a few S3 buckets used in that way, I'll make sure our guys know never to delete them.

[holdenc]

Yeah, apparently it's a known vector: https://hackerone.com/reports/121461