4 ms·
It's not clear to me that we have proof that it was a malicious actor. Was it perhaps AWS automation testing out the validity of the credentials before applying
by flerchin 4y ago
It's not clear to me that we have proof that it was a malicious actor. Was it perhaps AWS automation testing out the validity of the credentials before applying the leaked credential policy?
- ceejayoz 4y agoThe AWS process is hopefully "does this match a secret we know? invalidate!" and nothing more. Relying on "can this key do x?" would be a problem, because it might be able to do x in the future, and it doesn't appear they're testing all possible capabilities either.