CISA Details Incident Response to Exposed AWS GovCloud Keys

CISA responded after a contractor’s personal GitHub repository exposed credentials for highly privileged AWS GovCloud accounts and internal Infrastructure-as-Code and build repositories; the agency mitigated the exposure, found no evidence of external misuse or customer data loss, and outlined improvements including stronger repository controls, secret monitoring, logging, incident playbooks, and better researcher reporting channels.