S3-compatible ≠ S3-secure: Wiz finds neocloud clones drop key protections
Wiz audited six neocloud object stores (Nebius, Crusoe, Vultr, Lambda, Cloudflare R2, DigitalOcean) against AWS S3 and found compatibility masks real gaps. None match AWS's Block Public Access or IAM fine-grained controls; access keys lack the structured formats that secret scanners such as GitHub rely on. One tester found `delete-bucket-policy` deleted the whole bucket. Portability muscle memory is a security trap.