This commit is contained in:
gurkenhabicht 2024-02-08 23:07:17 +01:00
parent f2de7845c0
commit 1075f0b4ce
1 changed files with 2 additions and 1 deletions

View File

@ -89,7 +89,8 @@ checked if the request is allowed.
Policy evaluation can be found in the [AWS docs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html).
The following graph is taken from the documentation, it shows the evaluation
logic inside an account
![policy evaluation](./include/PolicyEvaluationHorizontal111621.pnhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-login.htmlg)
<img src="./include/PolicyEvaluationHorizontal111621.png" alt="Policy evaluation" width="50%" height="auto">
Policies like `assume-role` and `switch-role` can lead to the gain of roles
with higher permissions