SummitRoute/csp_security_mistakes

Add IAM policy mistakes

0xdabbad00 opened this issue 3 years ago · 1 comments

0xdabbad00 commented 3 years ago

Add Brandon Sherman's AmazonSageMakerFullAccess issue: https://summitroute.com/blog/2019/06/18/aws_iam_managed_policy_review/

Add https://duo.com/blog/potential-gaps-in-suggested-amazon-web-services-security-policies-for-mfa

https://medium.com/ymedialabs-innovation/an-aws-managed-policy-that-allowed-granting-root-admin-access-to-any-role-51b409ea7ff0

There are a lot of these and I'm not sure if I should list every minor one.

0xdabbad00 commented 3 years ago

Resolved in b962fda