Pesquisadores da Truffle Security identificaram 10.616 chaves de acesso da Amazon Web Services (AWS) ativas e válidas, expostas publicamente entre agosto de 2022 e agosto de 2026, conforme relatório publicado pela empresa em 19 de agosto de 2026.
Pesquisadores da Truffle Security identificaram 10.616 chaves de acesso da Amazon Web Services (AWS) ativas e válidas, expostas publicamente entre agosto de 2022 e agosto de 2026, conforme relatório publicado pela empresa em 19 de agosto de 2026.
Em contexto
- Tema: Ciberseguridad — Riesgo, identidad, respuesta a incidentes y cumplimiento.
- Fonte: CISO Advisor
- Publicado: 24/08/2026
Continuar lendo na fonte original →
Trecho publicado automaticamente pelo radar do site. O texto completo pertence ao veículo e está vinculado acima.
Why it matters
The cloud stopped being a technical decision a long time ago. Today it is a financial decision with technical consequences: capital investment gets swapped for monthly spend, and that swap suits some companies very well and others very badly.
My reading goes through who sees the bill. In organisations where cloud cost reaches the team that generates it, spend organises itself. Where only finance sees the bill, spend grows and the discussion becomes a blind cut every year end.
What usually goes wrong
Where it usually breaks is team capability. The platform is new but people learned on the fly, with no time and no support. They end up replicating data-centre practices in the cloud, which means paying cloud prices for benefits that never arrive.
What to watch
- Three-year total cost with real growth, not the first-year promotion.
- How hard it would be to leave or move a piece to another provider, which is future negotiating power.
- Who sees the bill and in what detail: with no owner for the spend, the spend grows on its own.
How I read this entry
What I would install alongside any move to the cloud is the discipline of switching things off. Tag everything by owner, review monthly what is running unused, and give somebody the authority to turn it off. Without that, waste eats the promised savings within two years.
The original story is published in another language; the excerpt is quoted as the publisher delivers it and the commentary is written in English.
Living through this in your own team?
Open the chat and tell me how you're handling it. I'm interested in comparing notes.
