Phished cookies in AWS still work even after the user changes their password. In this post, we explore the limitations of the persistent cookies in AWS.