AWS Vulnerability Reporting
AWS services and consoles. Customer-account issues are usually the customer's problem, not AWS's, unless you found a service-side cross-tenant bug.
Tags: vendor, cloud, aws
- Program model
- First-party VRP
- Regions
- Global
- Payout
- USD; case-by-case, historically strong for cross-tenant
Specialties: cloud, iam, console
How to approach it
Cross-tenant is the whole game. Misconfig in your own account is not a bounty.
- Stay inside the published service list. Do not scan other customers' buckets 'to see'.
- IMDS and confused-deputy in a managed service are the high-value class.