AWS CloudFormation Phishing Attack: A Growing Threat

Attackers abuse CloudFormation Launch Stack URLs to phish AWS account takeover via admin IAM roles. Anatomy of the attack, detection signals, and blue team controls.