High AWS S3 Object Deletion Count

Lacey Cochrane@NullVectorX

•updated Jan 18, 2026•5•1•94

Detects when a single IP address or identity performs a high number of S3 object or bucket deletions within a short timeframe. This could indicate an attacker attempting to destroy data, evade detection, or disrupt services.