It is an example.

enter image description here

What setting of S3 causes the s3 server to a listing of bucket content?


I have followed Céline Aussourd's answer and turned off the list of the s3 bucket. But unfortunately the cloudfront has cached the result and is still serving it.

Here is the bucket policy:

    "Version": "2012-10-17",
    "Id": "Public webserver policy",
    "Statement": [
            "Sid": "readonly policy",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::test2/*"

The listing of the bucket content is possible when Everyone has the permission to List.

In your bucket Properties > Permissions

Grantee: Everyone to List (see picture below) enter image description here

  • The listing is still available from the url (which is a frontfront server). I have updated my question to reflect this. – Anthony Kong Jun 8 '15 at 23:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.