Just to be clear here, this means that for a time @awscloud support was able to read all of your S3 data. There is no mitigation; this role is mandatory.
— Corey Quinn (@QuinnyPig) December 22, 2021
If you had CloudTrail data events enabled, you can audit. If you didn’t, it may be time to declare a security incident. https://t.co/5TZYrkRie6 pic.twitter.com/llS4U9Fi9u
from Hacker News https://twitter.com/QuinnyPig/status/1473705669517791253
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.