The Most Common Pattern I See

Across the AWS environments I've reviewed — financial services, retail, healthcare, telecom — there is one pattern that shows up almost everywhere.

It is not a sophisticated attack vector.

It is not a zero-day vulnerability.

It is IAM.