This is not about the AWS Console. It is talking about the customer's site hoste...

perpil 8 months ago | parent | context | favorite | on: Ask HN: Our AWS account got compromised after thei...

This is not about the AWS Console. It is talking about the customer's site hosted on CloudFront. It is possible to cross wires with user sessions when using CloudFront if you haven't set caching granular enough to be specific to an end user. This scenario is customer error, not AWS.

fulafel 8 months ago [–]

I'd argue it's a classic footgun and a flaw of CloudFront (they should at least warn about it much more).