Discover cloud storage by permutation
Storage names follow predictable patterns. Build a permutation list from the company name, products, and environments, then test all three major providers.
bash
cloud_enum -k target -k target-prod -k target-backups
# or targeted S3
for n in target target-assets target-backups target-dev; do aws s3 ls s3://$n 2>&1; done
Check read and write, not just existence.
bash
aws s3 cp test.txt s3://target-dev/ 2>&1 # public write is critical
Pro note: public write is often worse than public read, enabling content injection or supply-chain poisoning of assets the site loads. Include region-specific and hyphen and dot variants, and mirror the naming you already saw in JS and DNS to seed better guesses.