Scott Piper on Twitter: "AWSSupportServiceRolePolicy just got s3:GetObject. 😱 That role is supposed to only have metadata visibility. @AWSSecurityInfo you need to roll that back." / Twitter
https://twitter.com/0xdabbad00/status/1473448889948598275