A Confused Deputy Vulnerability in AWS AppSync | Hacker News Reader