Post

IAM Roles Anywhere can become AWS persistence. With enough access, an attacker can register a malicious CA as a trust anchor, bind it to a role profile, and mint credentials from outside AWS. hackingthe.cloud/aws/post_exp...