build1 publisher
DevOps Agent declined ec2:RunInstances after a tester granted it to the elevated role
A tester gave AWS DevOps Agent a broad elevated role and found its temporary session policy admits only supported actions, while an SSM document that accepts arbitrary package names still installed tmux after one approval.
Publishers:dev.to
Reality
- Evidence52
- Adoption
- Insufficient
- Hype gap−12
- Incentives32
- Confidence44