Researchers report thousands of publicly exposed AWS keys remain active

Truffle Security reported that more than 9,300 AWS access keys publicly exposed from August 2022 through August 2026 remain active and valid. It said 817 were linked to companies, including 526 root keys, while 242 IAM users had AdministratorAccess. Among the subset with complete credentials, the researchers said 88% of 10,616 keys continued to authenticate as of August 10. The company said it used read-only metadata and notified identifiable owners.