Access Keys
AssessTechniques
Static credentials used to authenticate programmatic access to cloud services.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 8InfoQ·7/16/2026securityAI Agents Exceed Cloud Billing Guardrails After Credential Theft
A small agency reported a $14,000 AWS bill in a single day after attackers stole static access keys and used them to run Claude workloads on Bedrock. The article also cites a separate DN42 case in which an autonomous agent provisioned $6,531 of oversized infrastructure in 24 hours, highlighting that cloud billing controls can lag behind agent-driven spend.