Scanning S3 Sandbox

Does anyone have experience with - or know if it’s possible - to use (as of yet undetermined) security software to auto-scan an S3 account for malicious code contained in uploaded files? I’m using S3 as a sandbox for member-uploaded files (images, zip, videos).

Todd
https://xiiro.com


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

You’d have to download the files to your server (or scan them on the way up) to do this. There’s nothing at all on S3 – no logic, no executable – it’s “dumb” storage, pure and simple.

If you’re hosting on EC2, then you get “free” bandwidth to and from S3, and it’s reasonably fast. Not nearly as fast as an SSD on your EC2 server, but fast enough that you won’t hate the process.

ClamAV is widely considered the best cross-platform scanner for uploaded files. I have never set it up.

Walter


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Scanning them on the way up does seem like the most hands-off way to get it done. Moving files back-and-forth between servers is the absolute last option, I want to be as hands-off as is reasonably possible.

ClamAV it is then. Thanks.

Todd
https://xiiro.com

You’d have to download the files to your server (or scan them on the way up) to do this. There’s nothing at all on S3 – no logic, no executable – it’s “dumb” storage, pure and simple.

If you’re hosting on EC2, then you get “free” bandwidth to and from S3, and it’s reasonably fast. Not nearly as fast as an SSD on your EC2 server, but fast enough that you won’t hate the process.

ClamAV is widely considered the best cross-platform scanner for uploaded files. I have never set it up.


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options