Securing Serverless: Attacking an AWS Account via a Lambda Function It’s not every day that someone lets you freely wreak havoc on their account just to find out what happens when you do.