SHADOW ROLES: AWS DEFAULTS CAN OPEN THE DOOR TO SERVICE TAKEOVER

Summary from the TLDR InfoSec newsletter

AWS default roles, such as AWSGlueServiceRole, often have overly broad access, like AmazonS3FullAccess, making service takeover easier for attackers. They can exploit these roles to manipulate various AWS services beyond S3 buckets, risking the entire environment. To mitigate risks, audit AWS roles and restrict excessive access, especially to S3 buckets.