Hacker News Reader

But these are some lame canary tokens then. One could generate real AWS API keys with no actual permissions.

CanaryTokens AWS tokens are real AWS creds, last time I checked.