Security researcher Piyush Gupta discovered that adding a trailing slash to API paths on AWS HTTP API, the newer and cheaper variant of API Gateway, could bypass Lambda authorizer authentication ...
A secure gateway orchestrator must route each task, hold shared context, enforce least-privilege access at every step and ...