100-Days-in-Cloud icon indicating copy to clipboard operation
100-Days-in-Cloud copied to clipboard

Published 20 hours ago • verified publisher icon LesUski

Risk: over-authorization of AWS IoT policy

Open P-Verifier opened this issue 2 years ago • 0 comments

We are a security research team and we recently discovered that there is an over-authorization security issue with this project's IoT policies. The affected files are as following:

1. 100-Days-in-Cloud/Labs/98 - AWS IoT - ESP32-CAM and Rekognition/esp32-request-rekognition-policy.json
2. 100-Days-in-Cloud/Labs/98 - AWS IoT - ESP32-CAM and Rekognition/esp32-request-url-policy.json

P-Verifier avatar May 16 '22 12:05 P-Verifier