Summary
Use of the AI services on AWS allows customer data to be moved outside of
the regions it is used in and potentially shared with third-parties.
Note: This issue is outside the scope of this database's usual criteria for inclusion, but has
been kept for historic reasons, as it was included in the original CSP Security Mistakes dataset.
Affected Services
N/A
Remediation
Customers can opt out of this data usage by following the instructions included in the linked reference.
Tracked CVEs
No tracked CVEs
References
https://twitter.com/benbridts/status/1280934515305824256https://summitroute.com/blog/2021/01/06/opting_out_of_aws_ai_data_usage/
Contributed by https://github.com/0xdabbad00
Disclosure Date
Wed, Jul 8th, 2020
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Ben Bridts
