Re: Ooooh...
Awhile back I set up an S3 bucket and intentionally left it open to the public, with the only contents some marketing videos to be embedded on a website.
Amazon repeatedly emailed me to warn me that it was insecure, and eventually said that if I didn't log in and re-reverify that the settings were intentional that they would shut off the insecure access.
So in other words, they ALREADY do what you suggest, and if insecure buckets are out there it is because the owners did it to themselves against multiple warnings from Amazon.
Biting the hand that feeds IT
