Executive Summary
This report contains the security assessment results from Cloudsplaining, which maps out the IAM risk landscape in a report.
The assessment identifies where resource ARN constraints are not used and identifies other risks in IAM policies:
- Privilege Escalation
- Resource Exposure
- Infrastructure Modification
- Data Exfiltration
Remediating these issues, where necessary, will help to limit the blast radius in the case of compromised AWS credentials.
Risk | Instances | Severity |
---|---|---|
Privilege Escalation | 24 | High |
Data Exfiltration | 7 | Medium |
Resource Exposure | 30 | High |
Credentials Exposure | 9 | High |
Infrastructure Modification | 41 | Low |
Report Generated: 2024-09-15 ⋄ Cloudsplaining version: 0.7.0