prowler/groups/group7_extras at ba87f437d5c7d406adac80e64535e0857e73e39a - prowler - Gitea: Git with a cup of tea

ghndrx/prowler

mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 23:05:05 +00:00

Files

Nick Malcolm ba87f437d5 This check will identify IAM Policies which allow an IAM Principal (a Role or User) to escalate their privileges due to insecure STS permissions. It is AWS best practice to only use explicitly defined Resources (Role ARNs) for an sts:AssumeRole action.

See more: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_permissions-to-switch.html#roles-usingrole-createpolicy

2020-08-20 21:08:00 +12:00

2.0 KiB

Raw Blame History

View Raw