These risk actors had been then capable of steal AWS session tokens, the short-term keys that allow you to ask for non permanent qualifications towards your employer?�s AWS account. By hijacking Lively tokens, the attackers ended up in the position to bypass MFA controls and get use of Risk-