[Contribution] Bucket Monopoly

[korniko98]

Summary (give a brief description of the issue)

The potential impacts include remote code execution (RCE), full-service user takeover which might provide powerful administrative access, manipulation of AI modules, exposing sensitive data, data exfiltration and denial of service. The vulnerabilities were quickly acknowledged and fixed by AWS.

References (provide links to blogposts, etc.)

https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/
https://www.aquasec.com/news/critical-vulnerabilities-aws/