$#aws

Hacker Holidays — Day 3: Complimentary

A "free" wellness app hands out unauthenticated Cognito guest credentials, and an over-scoped IAM role lets those guest credentials Scan the entire DynamoDB table instead of just one record.

• #hacker-holidays
• #cloud
• #aws
• #idor