Least-privilege review of IAM policies: spotting wildcard actions, confused-deputy exposure in cross-account roles, and the difference between a resource policy and an identity policy in an access decision.
Least-privilege review of IAM policies: spotting wildcard actions, confused-deputy exposure in cross-account roles, and the difference between a resource policy and an identity policy in an access decision.