Apple identified a cloud security issue within Amazon Web Services (AWS), leading to changes in the data deletion process. This discovery occurred in early 2023 when Apple noticed suspicious activity in terminated AWS accounts. The concern arose when it was revealed that data from approximately 2,200 closed accounts had not been deleted after 90 days, as expected. An internal investigation by AWS found almost 2,000 pieces of content or metadata linked to closed Apple accounts that were still present in the system.
It was reported that some of the retained data dated back to an account terminated in October 2020. Amazon assured Apple that all relevant data would be removed by June 2023 and that no unauthorized access had occurred. The investigation also uncovered flaws in the data deletion process, suggesting a malfunction in internal disposal systems or processes for specific services within AWS. This highlighted the need for clearer guidelines on data deletion and oversight from higher-level executives.
In response to the incident, AWS spokesperson Neighorn stated that the company now conducts automated audits of each AWS service for data deletion compliance. Any issues detected are addressed promptly to ensure compliance. Neighorn also mentioned that AWS has always had comprehensive guidance on data deletion, with recent improvements aimed at simplifying the process for engineers.
Overall, the incident between Apple and AWS shed light on the importance of robust data deletion processes in cloud services. The collaboration between the two tech giants resulted in significant changes to ensure data security and compliance moving forward. These improvements aim to prevent similar incidents in the future and uphold the trust of customers utilizing cloud services for their data storage needs.
Article Source
https://timesofindia.indiatimes.com/technology/tech-news/how-and-why-apples-alert-made-amazon-change-its-awss-data-deletion-process/amp_articleshow/110773138.cms