AWS Lambda SQLi Exploit Shows Path to Secrets Manager

A security researcher demonstrates a SQL injection in an AWS Lambda function that allows privilege escalation to access Secrets Manager. The attack chain involves assuming an IAM role, enumerating Lambda functions, and exploiting a vulnerable handler to attach a policy granting secret access. The lab highlights real-world risks of serverless misconfigurations.