aws-samples / aws-samples/aft-workshop-sample

Overly permissive roles for AFT

Open
#31 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
19
Forks
23
PR merge metrics
No merged PRs in 30d

Description

The IAM Roles created as part of AFT Bootstrap process of the workshop - `AWSAFTService` and `AWSAFTExecution` have trust policies which allow the role to be assumed by principals outside of aws organization.

This may result in security incidents in most organizations

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.