These risk actors had been then in a position to steal AWS session tokens, the short-term keys that allow you to request short-term credentials towards your employer??s AWS account. By hijacking Lively tokens, the attackers have been capable of bypass MFA controls and acquire access to Harmless