CAN YOU RUN AN AWS COMMAND FROM SLACK WITHOUT ANY AWS CREDENTIALS?

Summary from the TLDR InfoSec newsletter

AWS ChatBot is an AWS service that's designed to be used with messaging services (Teams, Slack, etc) to monitor and respond to AWS events. The service can be configured using a Channel Role which will give all members of the channel the same permissions without requiring AWS credentials. If this is combined with a permissive Channel Guardrail policy, any user will be able to execute AWS CLI commands in the configured account without any permissions.