Ian Mckay

An attacker with the ability to create CloudFormation stacks could cause
a denial-of-service on some CloudFormation actions within a single AWS account.


CloudFormation denial of service (in a single account)

Sophie Schmieg

S3 Crypto SDK vulnerabilities

Jonathan Rault

Using CloudTrail S3 data events, it was possible to determine the AWS account ID of
any existing S3 bucket by calling any S3 API, getting denied, and looking at the value in the resource
key in error message that showed up in CloudTrail.


CloudTrail S3 data events leak bucket Account ID

The immutability of Lambda versions could be violated via a timing attack
against CloudWatch Synthetics canaries.


Timing attack with Lambda and CloudWatch Synthetics

Summary

Affected Services

Remediation

Tracked CVEs

References

More vulnerabilities...

CloudFormation denial of service (in a single account)

Ian Mckay

S3 Crypto SDK vulnerabilities

Sophie Schmieg, Google

CloudTrail S3 data events leak bucket Account ID

Jonathan Rault, TrustOnCloud