3 ms·

Okta engineers stored some of their AWS keys in Slack. Depending on what those were the keys to it could be REALLY bad. Off the top of my head: direct database

Okta engineers stored some of their AWS keys in Slack. Depending on what those were the keys to it could be REALLY bad. Off the top of my head: direct database access, http server - could push compromised pages to all Okta users The AWS keys really could be the keys to the whole proverbial kingdom.

dzhiurgis 5y ago
FWIW organisation size of Okta probably has hundreds if not thousands of AWS keys. We really won't know which keys were that.
rampole 5y ago
Do you have a reference for this? Thanks.