Confused Deputy: When to use AWS IAM Role Conditions and Why?

A confused deputy is a type of security vulnerability.

In this video, let’s look at three common confused deputy scenarios within AWS and solutions to place appropriate safeguards

= = Recommend Playback Speed: 1.25x ==
- Click on Gear Icon at bottom of player.
- Select Playback speed and adjust the speed

AWS Certified Security – Specialty SCS-C01 [New]

Share Your Comments, Like and Subscribe!

Music: Stellar Wind YouTube Audio Library
Images: Microsoft Stock Images

ABOUT Chandra
Chandra Lingam teaches AWS, Security, SageMaker, ML, Regular Expression.

Complete Course List:

[yoavch]

Best explanation I found on the subject. Thank you!

[prakashq]

Really awesome explanation. Any confused deputy I would really recommend this video.

[manjunathshirageri]

Awesome Chandra. Clear cut explanation. Subscribing to your channel is required :)

[labone]

well explained, able to understand the complex shit in just 5 min, great sir keep it up

[ragustuff]

Very helpful! I finally understand the issue with the sad confused deputy :) Thank you!

[yashwanthreddy]

Thanks for the video,
But isn't the s3 bucket name globally unique, at 10:33 even if one account deletes the bucket another account shouldn't be able to create a bucket with the same name . Isn't it?