Postmortem: How a Misconfigured AWS IAM Role Exposed 100k User Records and How We Fixed It with HashiCorp Vault 1.16

On March 12, 2024, a single misconfigured AWS IAM role with overly permissive S3 read access exposed 112,409 user records containing PII, financial data, and authentication tokens to the public internet for 7 hours and 22 minutes. We detected the lea...