AWS Device Defender's IOT_POLICY_OVERLY_PERMISSIVE_CHECK audit check is designed to detect policies that grant publish/subscribe on $aws/things/*. This check is rated critical by…
AWS IoT's Device Defender service includes an audit check (IOT_POLICY_OVERLY_PERMISSIVE_CHECK) that flags overly permissive policies granting publish/subscribe on $aws/things/*. This misconfiguration, rated…
AWS IoT's device shadow service is central to the Shark vacuum vulnerability. The Exec_Command field in the shadow is processed by the…