A leaked AWS key shows up looking routine: a few deployment permissions, nothing alarming, straight to the back of the queue. What nobody checked is whether it can assume a role that reads production secrets.

That’s how leaked keys survive for years. We re-verified 10,616 AWS keys that leaked publicly since 2022: 88% still authenticate, the median one is five years old, and 768 give full administrative control of a company account.

In this on-demand webinar, Senior Product Manager Jim Freely shows why a leaked AWS key’s access takes work to reconstruct, and how to trace the chain.