AWS Amplify IAM role publicly assumable exposure

The AWS Amplify service was found to be misconfiguring IAM roles associated
with Amplify projects. This misconfiguration caused these roles to be assumable
by any other AWS account. Both the Amplify Studio and the Amplify CLI
exhibited this behavior. Any Amplify project created using the Amplify CLI
built between July 3, 2018 and August 8, 2019 had IAM roles that were assumable by
anyone in the world. AWS mitigated this vulnerability through backend changes to
STS and IAM, and also …

account amplify aws cli exposure found iam iam roles july misconfiguration project projects role roles service studio