Cloud IAM Misconfiguration
Critical · Cloud · CWE-284
Description
Wildcard IAM, public buckets, open security groups.
Root cause
Click-deploy defaults; no guardrails.
Impact
Data breach, crypto mining, ransomware.
Detection
CSPM (Prowler/ScoutSuite).
Mitigation
Least privilege; SCPs; IaC scanning.
Secure coding
Enable CloudTrail/logging; MFA on root.
Safe lab example
lab-iam-advanced
Practise related skills in Labs or deepen on Academy library.