Brandon Sherman of Twilio discovered something concerning with the AWS IAM Managed Policy that is recommended when using SageMaker. He mentioned it to a couple of folks to get more pairs of eyes on it, it was reported to Amazon, and rumor has it that AWS sounded the alarms all the way up to just below Bezos himself. AWS silently pushed out a fix for all customers (which is one of the benefits of using managed policies).
But here’s the thing: You probably never heard anything about this. There was no announcement.