Enumerate AWS API Permissions Without Logging to CloudTrail

0Sign in to vote or save

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Writeup for a bug I discovered in the AWS API that would allow you to enumerate certain permissions for a role without logging to CloudTrail.

Comments

Nothing yet. Say the first thing.