3 ms·
Yes, someone with your access and secret keys can spin up instances, create buckets, and do everything else that the stolen keys are authorized for.
by prattbhatt 12y ago
Yes, someone with your access and secret keys can spin up instances, create buckets, and do everything else that the stolen keys are authorized for.
- ceejayoz 12y agoWhich is why most things should be done with IAM keys specifically locked down to minimal privileges.
- prattbhatt 12y agoAgreed
- jes5199 12y agoApparently I have access keys that predate the release of IAM ! Fortunately there's a convenient "disable" link on security keys page.