We determined that these tools are not a contributing factor to this problem.

Our hypothesis was that perhaps one or more of these tools are automatically making these S3 buckets public, or perhaps contain wording for an action that is misleading and results in the bucket being made public. There are a handful of tools people use to work with S3 buckets that were not developed by Amazon. There are many reasons why this might be the case, but we decided to investigate one hypothesis, that perhaps one or more third-party tools used to work with S3 buckets are contributing to this problem. However, many of these incidents appear to be unintentional. There are legitimate reasons to make S3 buckets public, such as hosting the content for a public website. These are continually making the news for being found with sensitive information in them that have been made public. S3 buckets are a way of storing files on Amazon Web Services (AWS). Product & Engineering MaScott Piper A Security Audit of Third-Party AWS S3 Tools

How to access s3 bucket using cyberduck