Get Phished by a Public AWS Systems Manager Automation Document

You wanted to use the latest Amazon Nova Premier model from Amazon Bedrock, when you start searching online and stumble upon a post from someone sharing a link to the AWS Console. The link appears to be a secret but public AWS Systems Manager document, purportedly used by internal staff to grant access to selected alpha testers for the Nova Premier model.

The URL looks legitimate, as it’s point to a real AWS Console URL, with the document ARN pre-filled:

https://us-east-1.console.aws.amazon.com
  /systems-manager
  /automation
  /execute
  /arn%253Aaws%253Assm%253Aus-east-1%253A123456789012%253Adocument%252FAWSBedrock-SetupNovaPremier
    ?region=us-east-1

Read further in my original article on Dev.to.