Breaking News: Grepper is joining You.com. Read the official announcement!

What is Confused Deputy Problem in security context?

Pragya Keshap answered on February 4, 2023 Popularity 1/10 Helpfulness 1/10

answer What is Confused Deputy Problem in security context?

What is Confused Deputy Problem in security context?

Comment

The confused deputy problem is a security issue where an entity that doesn't have permission to perform an action can coerce a more-privileged entity to perform the action.

{
  "Version": "2012-10-17",
  "Statement": {
    "Sid": "ConfusedDeputyPreventionExamplePolicy",
    "Effect": "Allow",
    "Principal": {
      "Service": "rds.amazonaws.com"
    },
    "Action": "sts:AssumeRole",
    "Condition": {
      "ArnLike": {
        "aws:SourceArn": "arn:aws-cn:rds:us-east-1:123456789012:db:mydbinstance"
      },
      "StringEquals": {
        "aws:SourceAccount": "123456789012"
      }
    }
  }
}

https://docs.amazonaws.cn/en_us/AmazonRDS/latest/UserGuide/cross-service-confused-deputy-prevention.html

Popularity 1/10 Helpfulness 1/10 Language whatever

Source: Grepper

Tags: whatever

Link to this answer
Share Copy Link