CloudFormer review

CloudFormation resource provider credentials leak

CloudFormation allows the use of Lambda-backed resource providers, wherein Lambda can be used to write custom provisioning logic to be executed during CloudFormation stack operations. The aforement...

Timing attack with Lambda and CloudWatch Synthetics

The immutability of Lambda versions could be violated via a timing attack against CloudWatch Synthetics canaries.

CloudFormation denial of service (in a single account)

An attacker with the ability to create CloudFormation stacks could cause a denial-of-service on some CloudFormation actions within a single AWS account.