AWS Security makes an inscrutable choice

The article describes findings that hundreds of leaked AWS keys (including root keys) remain active and criticizes AWS’s Quarantine Policy as inadequate: while the policy attempts to avoid breaking customer environments by selectively denying some actions, many powerful actions remain possible for an attacker (role assumption, EC2 command execution, secret access, S3 object lock/retention, backup deletions), enabling severe data loss, service disruption, and fraud.