Comment by gebalamariusz

I see the UK government hasn't been on a good run lately. Google recently released the Cloud Threat Horizons H1 2026 report. A vulnerability in the OIDC trust policy can be exploited to gain admin access to AWS. The UK Government Digital Service was one of the affected organizations. Datadog found their IAM role misconfigured the same way.