If you missed Jonathon Poling’s presentation Loose Keys Bring These: Attackers + Me (Incident Responders) at the SANS Cloud and DevOps Security Summit, he has posted his slides here:
https://ponderthebits.com/presentations-podcasts/
Great presentation where JP walks through the leak, the attack, and the incident response.