Why IAM:PassRole Can Be Dangerous If Not Configured Correctly
· 5 min read
If you’ve been involved or interested in AWS security you’ve no doubt heard that IAM:PassRole can be dangerous if it’s not been configured correctly. I’ve made this blog post to show a logical flow an attacker may take if they are able to compromise an AWS Role that has the IAM:PassRole permission.