CISA Discloses AWS GovCloud Credentials Leak by Contractor, Publishes "Lessons Learned"

CISA has published an after-action report detailing a cyber incident where a contractor accidentally exposed the agency's AWS GovCloud credentials and Infrastructure-as-Code repositories in a personal, public GitHub account. The incident, which triggered an internal response, led to a rare public disclosure of "lessons learned" from the federal cybersecurity agency.