Timeline for Should an AWS Lambda trust-policy be narrowly scoped?
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 9, 2023 at 18:05 | comment | added | benjimin | I take it the principal is only the aws lambda service before execution begins (whereapon an assumed role becomes the principal instead). If an attacker gets the ability to create/configure other lambdas, it is already a catastrophe, and they can probably also overwrite this lambda anyway. | |
| Apr 9, 2023 at 17:53 | vote | accept | benjimin | ||
| Apr 9, 2023 at 10:18 | history | answered | le3th4x0rbot | CC BY-SA 4.0 |