🔶 Shadow Roles: AWS Defaults Can Open the Door to Service Takeover

Post walking through multiple real-world scenarios, including how a malicious Hugging Face model can escalate privileges, how limited Glue access can impact other services, and how a single default role can ultimately lead to full control of an AWS account.

https://www.aquasec.com/blog/shadow-roles-aws-defaults-lead-to-service-takeover/

#aws