Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Avoiding mistakes with AWS OIDC integration conditions

Summary

A review of common AWS OIDC integration mistakes: missing trust policy conditions—seen with GitHub Actions, Terraform Cloud, and GitLab—can let attackers assume IAM roles, and how to get them right.
Published
Collected

original ↗

Related coverage

back