Skip to content

H3-2022-0074

AWS Assume Role Access

Category CREDENTIALS
Base Score 5

Description

An AWS user or role in your AWS account can assume another role in your account.

Impact

This allows the original user or role to gain all of the permissions assigned to the assumed role. Depending on the permissions assigned, this could have critical implications.

References