Serverless Function Data Event Injection Event-Injection-S3 Server Side Template Injection Broken Access Control None Signed Token Algorithm Confusion None Unique Value IAM Function Privilage Management Permission Flaw CTF