As described by the two, the technique relies on hackers abusing the AWS Security Token Service (STS) to issue temporary tokens. These STS temporary tokens are meant to last between a few minutes ...

“We’re also observing elevated errors obtaining temporary credentials from the AWS Security Token Service, and are working in parallel to resolve these errors.” ...

Using the open-source IdP software Shibboleth, he describes how this uses the AWS Security Token Service to reduce the need for long lived credentials for both the Web Console and CLI.

"All these technologies rely on the AWS Security Token Service (AWS STS) to issue temporary security credentials that can control access to their AWS resources without distributing or embedding ...

Amazon has launched AWS Security Incident Response, a service to help triage and respond to cybersecurity threats.

Mission provides managed service packages to help organizations optimize, support, operate, and secure their AWS environments.