AWS CDK Vulnerability: Missing S3 Bucket Could Lead to Account Takeover

Attackers could exploit the flaw by creating a bucket with a predictable name if the original bucket is deleted or not created by the user, a process known as “S3 bucket namesquatting” or “bucket sniping.