I got an answer from AWS #Security about the #s3 #BucketB. #Amazon is not responsible how the customer uses their product, which is true. They have shared responsibility, and config is not their part, as it ends on the service-level. But now, as they know about a severe misconfiguration, they should in form the customer. Which they did not write about. #BucketB is still open.