[swyx]

this is pretty brilliant, aws cli should sherlock this.

when would you want write only?

[simonw]

For logging, in particular for an environment where you don't want a leaked credential to allow the deletion of any previously recorded files.

[Natfan]

does write only prevent overwrites?

[ufmace]

It does effectively, if you turn on bucket versioning.

I think write-only is worthwhile for database backups to guard against a ransomware compromise.

[simonw]

Good point, no it doesn't.

[Natfan]

but i suppose if you're prefixing your entries with enough entropy, it'd be quite difficult for adversaries to predict and overwrite files without an `ls` equivalent