WHAT'S THE WORST PLACE TO LEAVE YOUR SECRETS? – RESEARCH INTO WHAT HAPPENS TO AWS CREDENTIALS THAT ARE LEFT IN PUBLIC PLACES

Summary from the TLDR InfoSec newsletter

Researchers deployed canary tokens (aka fake AWS credentials) in public online locations to study threat actor behavior. These digital tripwires triggered alerts when accessed, revealing patterns in credential discovery and attack methods.