Amazon Web Services (AWS) is dedicated to the responsible disclosure of security vulnerabilities. We kindly ask that you do not open a public GitHub issue to report security concerns. Instead, please submit the issue to the AWS Vulnerability Disclosure Program via HackerOne or send your report via email. For more details, visit the AWS Vulnerability Reporting Page. Thank you in advance for collaborating with us to help protect our customers.
For guidance on securely deploying and operating this project (encryption, IAM, VPC, hardening items, and a pre-deployment checklist), see the Security Guide.