IAM Role Trust Policies: Misconfigurations Hiding in Plain Sight(token.security)

1 pointsby simplesortanno scorso1 comments

IAM Role Trust Policies: Misconfigurations Hiding in Plain Sight

https://www.token.security/blog/iam-role-trust-policies-misconfigurations-hiding-in-plain-sight

2 comments

br1anno scorso

The instance profile example makes it seem like you need to specify the account for "Service": "ec2.amazonaws.com" just with another syntax, while service principals are always in the same account AFAIK.

[deleted]anno scorso