ISSUE WITH AWS SIGN-IN IAM USER LOGIN FLOW

Summary from the TLDR InfoSec newsletter

AWS has remediated an issue with IAM use sign-in flow that could allow for a malicious user to enumerate logins. The vulnerability was due to a timing attack in which the server response times for a valid or invalid user varied. AWS remediated the issue by introducing a timing delay across all authentication failure scenarios.