BadBadger InfoSec
Menu
  • Home
  • About
  • Blog
Menu

Month: March 2024

What Lurks in the Shadows of IAM? The Hidden Risk of Shadow Permissions

Posted on March 29, 2024February 24, 2025 by Dave Brock

IAM policies are like layered security badges—one might deny you entry, but you’re in if another gives you an all-access pass. This is AWS IAM Policy Shadowing. If you’re managing AWS IAM policies, you probably feel pretty confident about your security controls. But what if I told you there’s a hidden risk that could be…

Read more

Recent Posts

  • Stopping an AWS Attack in Real Time – Walking through an Incident
  • Writing Secure IAM Policies to Prevent Shadowing and Conflicts
  • How to Detect IAM Policy Shadowing in AWS Using Native Tools
  • What Lurks in the Shadows of IAM? The Hidden Risk of Shadow Permissions
  • Becoming a Clear Communicator

Archives

  • December 2024
  • July 2024
  • April 2024
  • March 2024
  • November 2023
  • June 2023
  • March 2023
  • February 2023

Categories

  • InfoSec Career
  • Leadership
  • OSINT
  • Techniques
  • Tools
© 2025 BadBadger InfoSec | Powered by Minimalist Blog WordPress Theme