If you discover a potential security issue in this project, we ask that you notify AWS/Amazon Security via our vulnerability reporting page or directly via email to [email protected].

Please do not create a public GitHub issue for security vulnerabilities.

The vulnerability reporting page also contains AWS Security's PGP key, which you may use to encrypt sensitive disclosures.