hard20 pts · first answer countscloud-securityabacprivilege-escalation
Protecting tags used for ABAC
Your ABAC policies grant access when aws:ResourceTag/team matches aws:PrincipalTag/team. What extra control is essential?
Discussion 0
Join free to post in the discussion.
Related questions
- Who patches the VM operating system?Cloud Engineer
- Principle of least privilegeCloud Engineer
- Protecting the root userCloud Engineer
- What HTTPS protectsCloud Engineer
- Shell access without opening port 22Cloud Engineer
- IAM user vs IAM roleCloud Engineer
- Explicit deny always winsCloud Engineer
- Nothing allowed means deniedCloud Engineer