--- title: Antivirus for Amazon S3, The Blind Spot in Securing Cloud Storage description: The Amazon S3 environment can be compromised by an errant upload of an infected file. Learn more about the dangers of malware and how you can avoid it. image: https://cloudstoragesecurity.com/hubfs/Blog%20Images/Featured%20Images/Blind%20Spot%20in%20Cloud%20Storage%20blog%20image.webp --- ###### [BLOG](https://cloudstoragesecurity.com/news) Jun 20, 2020 | 2 min read # Antivirus for Amazon S3, the Blind Spot in Cloud Storage [Cloud Storage Security](https://cloudstoragesecurity.com/news/author/cloud-storage-security) ##### Share: ![fb-icon](https://cloudstoragesecurity.com/hubfs/fb-icon.svg) [![insta-icon](https://cloudstoragesecurity.com/hubfs/insta-icon.svg) ](https://www.instagram.com/) ![twit-icon](https://cloudstoragesecurity.com/hubfs/twit-icon.svg) [![YouTube Icon](https://cloudstoragesecurity.com/hubfs/youtube-icon.svg) ](https://www.youtube.com/@cloudstoragesecurity7887) ![ Cloud Storage Security Amazon S3, and Securing Data](https://cloudstoragesecurity.com/hs-fs/hubfs/Blog%20Images/Featured%20Images/Blind%20Spot%20in%20Cloud%20Storage%20blog%20image.webp?width=820&height=547&name=Blind%20Spot%20in%20Cloud%20Storage%20blog%20image.webp) Positively impacting shareholder value is every CEO’s dream. Negatively impacting shareholder value is every CISO’s nightmare. As more and more data moves to the cloud, additional threat vectors to customer data must be considered. Threats that include malware and viruses for Amazon S3. At the [2018 AWS re:Invent Keynote](https://youtu.be/nLyppihvhpQ), AWS S3 VP, Mai-Lan Tomsen Bukovec acknowledged the “tens of trillions of objects” exceeding “exabytes of storage” are being used on Amazon S3. It is hard not to argue Amazon S3 is one of the most successful services provided by AWS. AWS has unlimited emphasis ensuring your data is safe. Customers and AWS leverage many native features and security frameworks including redundancy, bucket permissions, encryption and duplication across regions and availability zones. ### The Threat is Hidden However, the hidden threat to your customers and corporate applications dependent on Amazon S3 is the ability for intentional malware to be uploaded by an attacker, or an unintentional upload of potentially malicious files or objects by a legitimate user to your object storage (Amazon S3). Despite rigid security and bucket permissions, there is opportunity for malicious actors to upload files with malware and ultimately serving it to downstream customers. This is the CISO’s nightmare as every subscribed customer receives a virus, trojan, spyware or ransomware from files within Amazon S3 coming from your infrastructure. ![AWS Shared Responsibility Model blog image](https://cloudstoragesecurity.com/hs-fs/hubfs/Blog%20Images/Blog%20In-Article%20Images/AWS%20Shared%20Responsibility%20Model%20blog%20image.webp?width=740&height=405&name=AWS%20Shared%20Responsibility%20Model%20blog%20image.webp) ### We Need to do this Together Leveraging the AWS “[Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/)“, simply corporations are responsible for their customer data. As you look to create applications and services for your customers, you must be sure you are not putting them and your shareholder value at risk. Amazon S3 is a blind spot to your cybersecurity framework. ### Upload Risk As object storage, files are not executable within the data store. Perceived as innocuous and virtually unlimited storage, files are blindly uploaded to storage buckets. The next step is for them to be accessed and potentially served to critical corporate applications or ultimately to downstream customers. This blind faith is the hidden risk to every organization providing a “Upload File” button in their customer facing applications. Minimally, every organization should be scanning their object storage if it is exposed to the external network. You are putting your reputation and shareholder value at risk. There are many obvious use cases that are should be inspecting uploads. These include the mortgage industry, the financial community and commercial and residential real estate listing agencies. Each time an application or file is requested for loan approval, pictures of your home, or your W2 and you browse desktop files and “upload” them to a service, the requesting application and corporation is at risk for malicious code. ### Download Risk As a more sophisticated attack, it is possible for nefarious actors to infect your object storage with malware or zero-day code to ultimately impact your consumer base. As an example, a music service provides a requested download to their subscribed customers. There is the potential for the payload included virus or malware such as a keylogger or trojan attack. Every customer subscribed to the service that received or requested the infected file would receive this hidden attack. If this were to occur, the music company would be receiving a considerable amount of negative press that could ultimately impact their shareholder value. This is the nightmare every CISO fears.   ### Visibility to the Blind Spot After looking at the lack of available solutions in the industry and the known threat, a veteran team of cloud and security professionals established Cloud Storage Security. Today, it is possible to inspect upload and download files being served or written to Amazon S3 with industry leading antivirus and antimalware verdict engines. Cloud Storage Security Antivirus for Amazon S3will discover Amazon S3 buckets and identify known and suspect malware. It is possible to write, delete or quarantine files base on their risk score. Cloud Storage Security allows for simple deployment leveraging containers providing real-time or event based scheduled scanning. Leveraging a simple dashboard, buckets can be toggled for scanning and enable the ability to integrate with third party applications. Cloud Storage Security Antivirus for Amazon S3 will help reduce the risk posture of object storage and allow CISO’s to focus on other security concerns and give visibility to their cloud object storage. If you want to know more or have interest in [Cloud Storage Security](https://cloudstoragesec.com/), contact the storage security specialist team at [info@cloudstoragesec.com](mailto:info@cloudstoragesec.com)     ##### Share: ![fb-icon](https://cloudstoragesecurity.com/hubfs/fb-icon.svg) [![insta-icon](https://cloudstoragesecurity.com/hubfs/insta-icon.svg) ](https://www.instagram.com/) ![twit-icon](https://cloudstoragesecurity.com/hubfs/twit-icon.svg) [![YouTube Icon](https://cloudstoragesecurity.com/hubfs/youtube-icon.svg) ](https://www.youtube.com/@cloudstoragesecurity7887) ## Continue Reading [``` (String: protect s3 buckets featured image) ``` ![protect s3 buckets featured image](https://cloudstoragesecurity.com/hs-fs/hubfs/Blog%20Images/Featured%20Images/protect%20s3%20buckets%20featured%20image%20820x547.webp?width=387&height=258&name=protect%20s3%20buckets%20featured%20image%20820x547.webp) ](https://cloudstoragesecurity.com/news/2020/09/14/protect-your-amazon-s3-buckets) Sep 14, 2020 ##### Protect Your Amazon S3 Buckets There is no doubt that as each day goes by, more and more data is migrating into cloud storage. The public cloud, or Infrastructure as a Service (IaaS) as some call it, has become the new normal. Out ... [Cloud Storage Security](https://cloudstoragesecurity.com/news/author/cloud-storage-security) ##### [ Read now ](https://cloudstoragesecurity.com/news/2020/09/14/protect-your-amazon-s3-buckets) [``` (String: av for amazon s3 workshop application workflows featured image) ``` ![av for amazon s3 workshop application workflows featured image](https://cloudstoragesecurity.com/hs-fs/hubfs/Blog%20Images/Featured%20Images/Antivirus%20for%20Amazon%20S3%20Workshop%20Malware%20Scanning%20application%20workflows%20820x547.webp?width=387&height=258&name=Antivirus%20for%20Amazon%20S3%20Workshop%20Malware%20Scanning%20application%20workflows%20820x547.webp) ](https://cloudstoragesecurity.com/news/antivirus-for-amazon-s3-workshop-malware-scanning-for-application-workflows) May 11, 2022 ##### Antivirus For Amazon S3 Workshop: Malware Scanning For Application Workflows If you ingest files into Amazon S3 from third-party sources that can eventually enter an environment where they become executable, you're opening the door to malicious payloads. Learn how to protect y... [Cloud Storage Security](https://cloudstoragesecurity.com/news/author/cloud-storage-security) ##### [ Read now ](https://cloudstoragesecurity.com/news/antivirus-for-amazon-s3-workshop-malware-scanning-for-application-workflows) [``` (String: Image of downstream data and users with an intent to prevent and detect S3 malware) ``` ![Image of downstream data and users with an intent to prevent and detect S3 malware](https://cloudstoragesecurity.com/hs-fs/hubfs/Blog%20Images/Featured%20Images/Navigating%20the%20Threat%20Landscape%20of%20S3%20Malware%20for%20Downstream%20Users%20821x547.webp?width=387&height=258&name=Navigating%20the%20Threat%20Landscape%20of%20S3%20Malware%20for%20Downstream%20Users%20821x547.webp) ](https://cloudstoragesecurity.com/news/navigating-the-threat-landscape-of-s3-malware-for-downstream-users) Oct 31, 2024 ##### Navigating the Threat Landscape of S3 Malware for Downstream Users In the rapidly evolving digital landscape, cloud storage services like Amazon Simple Storage Service (S3) have become critical for business operation. However, with great power comes great responsibil... [Cloud Storage Security](https://cloudstoragesecurity.com/news/author/cloud-storage-security) ##### [ Read now ](https://cloudstoragesecurity.com/news/navigating-the-threat-landscape-of-s3-malware-for-downstream-users) ![angled bg image](https://cloudstoragesecurity.com/hubfs/Website/Website_On_Page_Graphics/angled%20bg%20image.svg) ## Tired of Reading? Want to watch something instead? [ Check out our videos ](https://cloudstoragesecurity.com/webinars) ![watch video blog cta image 614x261](https://cloudstoragesecurity.com/hs-fs/hubfs/Website/Website_On_Page_Graphics/watch%20video%20blog%20cta%20image%20614x261.webp?width=614&height=261&name=watch%20video%20blog%20cta%20image%20614x261.webp) ![](https://px.ads.linkedin.com/collect/?pid=2428282&fmt=gif)