whoknew1122

40 ms·

1. 421.▲
   by whoknew1122 6y ago

   This is also a problem when using CloudFormation. CloudFormation will often create resources without tags and then add the tags in a separate call.
2. 422.▲
   by whoknew1122 6y ago

   > "Yes, but what they're talking about isn't a security denial but a configuration check." Configuration is a part of security though. Let's say AWS credentials are leaked. One of the most common uses for leaked
3. 423.▲
   by whoknew1122 6y ago

   > "A possible fix is to allow custom deny reasons but large changes like this to any already extremely large and entangled system like IAM is unlikely." This would allow an attack to enumerate permissions by seeing what's