A new ransomware campaign encrypts Amazon S3 buckets ... outside the AWS cloud can make authenticated calls without long-term AWS credentials using the Roles Anywhere feature.