IAM Misconfigurations in AWS Cloud Architecture

#The Threat of Over-Privileged Roles#link

Cloud misconfigurations represent over 80% of data breaches. Setting loose IAM policy permissions allows attackers who hijack standard worker containers to query S3 buckets, read databases, or build fresh unauthorized accounts.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:*",
      "Resource": "*" // DANGEROUS WILDCARD ALLOWING READ/WRITE TO ALL S3 BUCKETS
    }
  ]
}