By the same token: How adversaries infiltrate AWS cloud accounts

Adversaries are taking advantage of AWS’s Secure Token Service (STS) to generate short-term credentials to access organizations’ cloud assets.

access accounts adversaries assets aws aws cloud cloud credentials organizations service token