A Confused Deputy Vulnerability in AWS AppSync

https://securitylabs.datadoghq.com/articles/appsync-vulnerability-disclosure/