> And honestly, the problem has been so difficult to solve, that I think every AWS customer leveraging Instance Profiles or machine roles is vulnerable to this

> And honestly, the problem has been so difficult to solve, that I think every AWS customer leveraging Instance Profiles or machine roles is vulnerable to this somewhere. If one app gets compromised and you haven't limited blast radius, you're screwed. What a shit product. I loved it back when we could discuss IT infrastructure without using AWS product names. They have infiltrated IT and the prices will continue to rise. If you took the bait; you're screwed. They are ripping through your data (hosted on THEIR machines) to compete against you. Here are my thoughts. IT'S A TRAP! STAY AWAY!