IAM Policy Audit
cloud · easy · +25 XP
Target
GET /api/lab/iam-audit-101/policies (list policy ARNs + JSON documents)
POST /api/lab/iam-audit-101/assume body {policy_arn} (returns flag if policy grants *:* on *)
Goal: among 6 policies, one has Effect:Allow, Action:*, Resource:*. Find its ARN, post it to /assume, and you'll receive the flag (simulated admin session).
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/iam-audit-101/
// reuse on the cli
// submit flag
// no solves yet
2 of 10 · cloud