https://seguridadpy.info/2022/12/vulnerabilidad-confused-deputy-aws-appsync-html/