Internet-Scale Analysis of AWS Cognito Security

Explore the findings of an extensive internet-scale analysis on AWS Cognito security configurations in this 45-minute Black Hat conference talk. Discover how the research identified 2500 identity pools, granting access to over 13,000 non-public S3 buckets, 1200 DynamoDB tables, and 1500 Lambda functions. Gain insights into potential security vulnerabilities in AWS Cognito setups and their implications for cloud infrastructure. Presented by Andres Riancho, this talk offers valuable information for cybersecurity professionals, cloud architects, and anyone interested in AWS security best practices.

Internet-Scale Analysis of AWS Cognito Security