Skip to content
Topics
Donate
Sign in Subscribe
Security

Exploiting, Detecting, and Correcting IAM Security Misconfigurations

Three IAM security misconfiguration scenarios are rather common: allowing the creation of a new policy version, the modification of a role trust policy, and the creation of EC2 instances with role passing. We look at ways to avoid and detect IAM security holes.

By  Stefano Chierici
Updated / Published 12 min read
Actor silhouettes against a red curtain
Photo by Kyle Head on Unsplash

This content is for paying members only

Subscribe
Add ADMIN IT Infrastructure & Operations on Google

  • Stefano Chierici

    Stefano Chierici is a security researcher at Sysdig, focusing on defending containerized and cloud environments from attacks ranging from web to kernel. In 2019, he obtained the Offensive Security Certified Professional (OSCP) Certification.