What he revealed however, was that Facebook doesn't pay attention to least privilege with key access, what those keys access[1] and more importantly where those

What he revealed however, was that Facebook doesn't pay attention to least privilege with key access, what those keys access[1] and more importantly where those keys access data from[2]. I have a feeling there's some scrambling to cover these blind spots over at Facebook. [1] http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerLogs.html http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerLogs.ht... [2] http://docs.aws.amazon.com/AmazonS3/latest/dev/LogFormat.html http://docs.aws.amazon.com/AmazonS3/latest/dev/LogFormat.htm...