CircleCI working with AWS to identify, rotate tokens impacted by the breach

CircleCI said the company's goal in partnering with AWS is to help customers easily identify and revoke or rotate any potentially affected keys. They also stressed that “[a]t this time, there is no indication that your AWS account was accessed, only that there is a possibility the token stored in CircleCI was leaked, and therefore should be deleted from AWS and rotated.” 

account aws breach circleci cloud security customers identify keys leaked the company third party risk token tokens working