Today Thinkst released a free, new Canarytoken - AWS Infrastructure Canarytoken on https://canarytokens.org.

It catches attackers in your AWS account by putting tempting assets in their way and alerting you if they get probed.

Extending their old work on fake AWS assets, this makes it even easier to deploy juicy S3 buckets, DynamoDB tables, SSM parameters, SecretsManager secrets, and SQS queues, that attackers will want to browse.