AWS Default Role Suspicious S3 Actions Detection

Aaron Mog@AaronMogS2S

•updated May 8, 2025•1•35

Detects suspicious S3 actions by default AWS service roles that may have overly broad S3 permissions, potentially leading to service takeover as identified in Aqua Security's "Shadow Roles" research.