AWS CLOUDQUARRY: DIGGING FOR SECRETS IN PUBLIC AMIS

Summary from the TLDR InfoSec newsletter

Researchers from KPMG Romania have published this in-depth article about how public AMIs are exposing sensitive data. They collected AMIs from all AWS regions, identified owners with many public AMIs, and accessed the contents to discover secrets like access keys and confidential data. The researchers emphasized responsible disclosure and highlighted the need for companies to secure their public AMIs.