Seems like an unusually simple exploit, essentially using an advanced postgres feature as intended. Impressive though!

The fact AWS overlooked access controls allowing a customer to reach system files, let alone the STS token, on a multi-tenant service is worrisome.