3 ms·

I believe AWS uses the Github API to determine when projects compromise their (or their users) AWS credentials and takes steps to (i.e. revokes credentials) mit

I believe AWS uses the Github API to determine when projects compromise their (or their users) AWS credentials and takes steps to (i.e. revokes credentials) mitigate disaster. Perhaps Slack needs to start doing the same for their bots?

AdamJacobMuller 10y ago
It is not a bad idea. Amazon has more at stake because a compromised token is going to lead to someone doing bad things with AWS and probably running up a huge bill that Amazon will have to stick the customer with, annoying the customer, or simply eat the cost.