Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources

During February 2024, we discovered critical vulnerabilities in six AWS services. The impact of these vulnerabilities range between remote code execution (RCE), full-service user takeover (which might provide powerful administrative access), manipula...