When asked about the feasibility of abusing this sort of abandoned internet infrastructure, watchTowr CEO Benjamin Harris told me it would be "terrifyingly simple" to pull off.
Reused AWS S3 buckets a weak link in supply chain security
When cloud customers don't clean up after themselves, part 97
theregister.com