TLDR Tech / Practical
Exposed AWS keys are being checked for Amazon Bedrock access beyond credentials
Security experts have observed credential harvesting operations and scripts that specifically test compromised AWS access keys for access to Amazon Bedrock. Attackers are using the STS GetCallerIdentity API followed by Bedrock commands like ListFoundationModels and Converse to gauge the value of pilfered credentials. This pattern indicates a rise in threat actors targeting cloud environments by systematically validating access to AI services.
Read the full story