Hacker News Reader

I’m not that familiar with AWS innards. Can you explain how this one flag can access any API?

AWS uses one algorithm to authenticate requests against all of its APIs. Many of its APIs accept simple query parameters or JSON, making them easy to call with curl.

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_a...

Reply on news.ycombinator.com