Breaking the Trust Boundary: AWS Cognito Guest-to-Authenticated Role Escalation Write up

Introduction AWS Cognito Identity Pools are commonly used in mobile and web applications to provide temporary AWS credentials without exposing long-term access keys. The idea is simple: Anonymous use