When Identity is the Attack Path

A cached AWS access key left on a Windows machine demonstrates a critical security vulnerability where standard AWS behavior created an unintended attack path. Despite no policy violations or misconfigurations, a single compromised credential could have granted attackers access to approximately 98% of the company's cloud entities. The article highlights how identity-based security risks can emerge from routine system operations.