Post

Turns out, ReadOnlyAccess can read quite a bit. In his latest blog, Principal Security Consultant Mike Saunders digs into AWS ReadOnlyAccess and how it can expose passwords, secrets, container data, Lambda code, and more. 🔗 redsiege.com/access-policy

1/10/26, 6:41 pm1 repost0 likes

cl0q

@cl0qsearch.bsky.social

ReadOnlyAccess is one of the most over-permissioned managed policies in AWS — it reads far more than people assume. Scoping down to read-only on specific services (or attribute-based conditions) is an underrated hardening win.