🔶 Abusing AWS Serverless Image Handler

The AWS solution "Dynamic Image Transformation for Amazon CloudFront", previously known as "AWS Serverless Image Handler", contains a configuration weakness where the role associated with the Lambda does not constrain which buckets can be accessed. The environment variable can be set to a wildcard allowing access to any bucket.

https://www.o3c.no/knowledge/abusing-aws-serverless-image-handler

#aws