Skip to content

Commit

Permalink
feat: enhance iam_role_cross_service_confused_deputy_prevention recom…
Browse files Browse the repository at this point in the history
…mendation
  • Loading branch information
HugoPBrito committed Feb 24, 2025
1 parent 8a144a4 commit dbc4dfd
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@
"Terraform": ""
},
"Recommendation": {
"Text": "Use the aws:SourceArn and aws:SourceAccount global condition context keys in trust relationship policies to limit the permissions that a service has to a specific resource",
"Text": "To mitigate cross-service confused deputy attacks, it's recommended to use the aws:SourceArn and aws:SourceAccount global condition context keys in your IAM role trust policies. If the role doesn't support these fields, consider implementing alternative security measures, such as defining more restrictive resource-based policies or using service-specific trust policies, to limit the role's permissions and exposure. For detailed guidance, refer to AWS's documentation on preventing cross-service confused deputy issues.",
"Url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html#cross-service-confused-deputy-prevention"
}
},
Expand Down

0 comments on commit dbc4dfd

Please sign in to comment.