Static AWS keys let attackers spend $14K on Claude via Bedrock in one day
A tiny agency’s static AWS keys let attackers fire off Claude calls on Bedrock, racking up $14,000 in a day. The incident shows AI agents with cloud credentials can bypass billing safeguards built for human‑scale errors, demanding tighter IAM and real‑time budget guardrails.