When Identity is the Attack Path

Consider a cached access key on a single Windows machine It got there the way most cached credentials do a user logged in and the key stored itself automatically Standard AWS behavior No one misconfigured anything or violated a policy Yet that single key which was easily accessible to a minorleague attacker could have opened a path to some 98 of entities in the companys cloud