Security researchers are raising the alarm about mobile app developers relying on insecure practices that expose Amazon Web Services (AWS) credentials, making the supply chain vulnerable.

The SDK supports Amazon’s web identity federation feature (you wouldn’t want to add your AWS credentials in your HTML and JavaScript, after all).

Hundreds of mobile apps have been found to be leaking Amazon Web Services (AWS) credentials. A recent Symantec analysis identified 1,859 publicly available apps, 98% of which are iOS apps ...

The information pulled this way included AWS customer keys and secrets, database credentials, Git credentials and source code, SMTP credentials (for email sending), API keys for services like ...