This article is intended to serve as a “blue team” focused response to last week’s post on Quiet Riot, a tool I built for unauthenticated enumeration of services, roles, and users in an AWS account or in every AWS account in existence.