What he revealed however, was that Facebook doesn&#x27;t pay attention to least privilege with key access, what those keys access[1] and more importantly where those keys access data from[2]. I have a feeling there&#x27;s some scrambling to cover these blind spots over at Facebook.<p>[1] <a href="http:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;AmazonS3&#x2F;latest&#x2F;dev&#x2F;ServerLogs.html" rel="nofollow">http:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;AmazonS3&#x2F;latest&#x2F;dev&#x2F;ServerLogs.ht...</a><p>[2] <a href="http:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;AmazonS3&#x2F;latest&#x2F;dev&#x2F;LogFormat.html" rel="nofollow">http:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;AmazonS3&#x2F;latest&#x2F;dev&#x2F;LogFormat.htm...</a>