PUBLICLY EXPOSED AWS SSM COMMAND DOCUMENTS

Summary from the TLDR InfoSec newsletter

Rami McCarthy scraped AWS for publicly exposed SSM Command Documents that allow a configured IAM user to run a set of bundled commands against an instance. McCarthy detected exposed API keys and other secrets, S3 buckets, and other artifacts in the 2,472 exposed documents. AWS should make documents private by default and scan for exposed secrets automatically.