Detect Amazon S3
Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.
Detection looks at response headers, script sources across 5 fingerprint rules among the site's public responses.
01
Websites using Amazon S3
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Amazon S3. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Script sources
03
Example public indicators for Amazon S3
Illustrative indicators derived from public catalog metadata for Amazon S3. A live scan may match additional proprietary rules beyond these examples.
- content-security-policy: s3*amazonaws.com
- content-security-policy-report-only: s3*.amazonaws.com
- server: AmazonS3
- x-amz-server-side-encryption
- s3*.amazonaws.com/
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Amazon S3 signature (5 rules) at the time of the scan.
- Does not establish
- A sitewide install of Amazon S3, an active vendor contract, exclusive use, or that Amazon S3 is still in place today.
05
How to check a site for Amazon S3
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Amazon S3 signals.
- 2. PluginView reads only public responses (response headers, script sources) and scores them against the Amazon S3 signature set (5 rules).
- 3. Review the confidence score and text explanation for Amazon S3 on the results page.
06
Commonly implies
A confirmed Amazon S3 match also implies these technologies are present.
07
FAQ: detecting Amazon S3
- Can PluginView detect Amazon S3 without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Amazon S3 — typically response headers, script sources. It does not bypass authentication or paywalls.
- What category is Amazon S3?
- Amazon S3 is classified under CDN in the PluginView directory.
- How many fingerprint rules cover Amazon S3?
- This reference currently tracks 5 fingerprint rules across response headers, script sources. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Amazon S3?
- Illustrative public indicators for Amazon S3 include content-security-policy: s3*amazonaws.com; content-security-policy-report-only: s3*.amazonaws.com; server: AmazonS3. A live scan may match additional proprietary rules beyond these examples.
