Preventing anonymous privilege escalation via misconfigured OIDC roles: defensive strategies and AWS's improvements| Hack to Def