EliavLivneh

3 ms·

1. 1.▲
   by EliavLivneh 1y ago

   Hey, author of the blog here :) Just wanted to point out that it is not just names of objects in sensitive accounts exposed here - as I wrote, the spoke roles also have iam:ListRoles and iam:ListPolicies, which is IMO much more sensitive th
2. 2.▲
   AWS Built a Security Tool. It Introduced a Security Risk(token.security)

   2 points by EliavLivneh 1y ago|0 comments
3. 3.▲
   Secure Cross-Account Access Is Tricky. Four Common Dangerous Misconceptions(token.security)

   4 points by EliavLivneh 1y ago|0 comments