Labs / Function URL · still public
Function URL · still public
WAF sits on CloudFront. Probe both doors, fix the function origin check, prove it with the project test.
Terminal
How to work it
Same loop as a small repo checkout: read README, run the test, inspect the failure, change the code, re-run until it exits 0.
This is a simulated POSIX-ish shell (not a full VM). No production network.
New here? help lists tools. Stuck? help next gives one hint at a time.
Related note: /proof/notes/function-url-still-public/ · All labs
Engineering commentary only — not audit, legal, or certification advice. Simulated tokens only.