AWS Built a Security Tool. It Introduced a Security Risk.

AWS's Account Assessment for AWS Organizations tool managed to crank up privilege escalation risks. Its deployment instructions? About as safe as skydiving with a bedsheet. They urged the "hub role" to chill in less-secure accounts, opening a treasure trove of dicey trust paths. AWS rushed to bandage the wound with updated docs. But if you set this up before 2025-01-28 and ignored those stricter security whispers, chaos might still lurk in your backyard.