Topic

#cloudfront

1 essay on cloudfront from the people writing in Remote Since Forever.

Essays
1
Contributors
1
First filed
Aug 2026
Written by NH
  1. aws

    How a CloudFront Custom Error Page Leaked JWTs to S3: A Case Study

    A pen-test curl found CloudFront forwarding `Authorization` headers to the S3 error-page bucket, where S3 reflected every JWT back in its XML error response. Two lines of Terraform closed it across sixteen distributions.

    Nedim Hadzimahmutovic 12 min
Type to search. ↑↓ to navigate. Enter to open. Esc to close.