Skip to content
A security community success story of mitigating a misconfiguration
wiz.io | blog | #cloud | #cloud-security | #aws | #github-actions | #misconfiguration | #iam | #oidc
Summary
The story of fixing a common misconfiguration: GitHub Actions OIDC trust policies missing their 'sub' condition let anyone assume AWS roles, until coordinated research pushed defaults to change.
- Published
- Collected