AWS S3 bucket writeable for authenticated AWS users

Summary

S3 bucket permissions were not configured correctly, allowing any authenticated AWS user to delete and write files.

Nutanix didn't properly configure one of their S3 buckets permissions and inadvertently allowed any authenticated AWS user to delete and write files. An attacker could post a malicious file into that bucket that may at some point be accessed by a Nutanix staff member, thinking it's been uploaded by another staff member or some automated system. ACLs for that S3 bucket were improved to prevent such a concern.