AWS AWSCompromisedKeyQuarantine policy auto-quarantines IAM keys exposed on GitHub; Unit 42 tests and detection guidance
Unit 42 analyzed how AWS neutralizes publicly exposed IAM access keys by automatically attaching the AWSCompromisedKeyQuarantine managed policy, and how that policy has changed since its release on Aug. 11, 2020. The mechanism relies on the GitHub secret scanning partner program, which alerts AWS when long-term keys appear in public repos…