3 ms·
From the article, one problem is that even if you don't use your AWS account on the Amazon store, you could, and so XSS vulnerabilities in the store can be used
by snewman 15y ago
From the article, one problem is that even if you don't use your AWS account on the Amazon store, you could, and so XSS vulnerabilities in the store can be used to hijack AWS accounts. Unfortunately the store is large and complex and so has a large attack surface area.
- btn 15y agoAmazon offer security token authentication for accessing AWS account resources, which can limit the impact of a breach in another part of their system.