CONDITIONAL LOVE FOR AWS METADATA ENUMERATION

Summary from the TLDR InfoSec newsletter

aws:ResourceAccount, as well as various other global conditions, can be used with the StringLike operand to enumerate account IDs, tags, and other metadata across most AWS APIs. The post includes a tool to automate the process.