Ensure IAM Roles are Least Privileged

Description

With an over-permissive IAM role assigned to a function, an attacker may leverage an application layer vulnerability in your function to perform lateral movement into other resources in your AWS account. You need to make sure you craft your policies with the least privilege approach in mind.
Jit will check that your IAM roles are configured with the least privilege approach in mind.

Stack layer

Security domain

Security tool initiated by this item

Infrastructure

Supply chain attack

AirIAM


Did this page help you?