hard20 pts · first answer countscloud-securityprivilege-escalationlambda

Updating code of a privileged Lambda

A developer can call lambda:UpdateFunctionCode on any function, but has no IAM permissions. One function runs with an admin role. What can they do?

A.Nothing beyond changing the function's logic, since they have no IAM rightsB.Deploy code that uses the function's admin role to act on their behalfC.Only read the function's environment variablesD.Change the function's execution role to their own user

Discussion 0

Join free to post in the discussion.

Updating code of a privileged Lambda

Discussion 0

Related questions