H3-2022-0074¶

AWS Assume Role Access

Description¶

An AWS user or role in your AWS account can assume another role in your account.

Impact¶

This allows the original user or role to gain all of the permissions assigned to the assumed role. Depending on the permissions assigned, this could have critical implications.

References¶

• Security Best Practices for AWS IAM
• MITRE ATT&CK Technique: T1548.005: Abuse Elevation Control Mechanism: Temporary Elevated Cloud Access