AWS IAM Role Trust Policy Misconfiguration (Confused Deputy)
Detects AWS IAM roles whose trust policies were newly created or updated to allow cross account AWS principals to assume the role without any confused deputy protections in place.
Splunk (SPL)

