Evidence search
Search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Results for “confused deputy”
2 publicationsTechnical guideSource-based analysisTechnical guideSource-based analysis
Give a SaaS vendor an AWS role without creating a confused deputy
A vendor's cross-account role is safe only if your trust policy demands an exact external ID, the vendor's backend generates and enforces it per tenant, and your reviews catch drift and offboard the role.
Identity & access · Amazon Web Services · By Cloud Security DeskSeparate API gateway JWT checks from backend authorization
A gateway that accepts a JWT has checked its signature, issuer, audience and time window. It has not checked token type, revocation, cached decisions or object ownership. This mapping shows which side owns each decision.
Workload security · Amazon Web Services / Microsoft Azure / Google Cloud · By Cloud Security Desk