hard20 pts · first answer countsaws-iamcloud-security

Hidden escalation with PassRole

A developer's IAM policy allows ec2:RunInstances and iam:PassRole on Resource "*". They have no admin rights. Why is this a privilege escalation risk?

A.RunInstances lets them read every S3 bucket directlyB.PassRole lets them change their own password policyC.It is not a risk because EC2 has no permissionsD.They can launch an instance with a more powerful role attached and use its credentials from the instance

Discussion 0

Join free to post in the discussion.

Hidden escalation with PassRole

Discussion 0

Related questions