11:55
2026-08-24
dev.to
ai-safety
Zero Permissions on Secrets Manager. Full Access to Your Secrets.
A CloudGoat walkthrough by VirajMathpati demonstrates a privilege escalation chain that bypasses permission-based scanners, allowing an IAM user with zero Secrets Manager permissions to retrieve a sec…