A confused deputy vulnerability in AWS AppSync | Datadog Security Labs

Public disclosure of a cross-account security vulnerability in AWS AppSync.
securitylabs.datadoghq.com securitylabs.datadoghq.com