Your question is Analyze a Misconfigured AWS STS Permissions. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Analyze a JSON document containing misconfigured STS access permissions and AWS ARNs, and identify the security vulnerabilities or permission flaws.
Asked in the CoderPad Interview stage. The CoderPad round tested the candidate's ability to review JSON configuration files for insecure AWS STS access settings and incorrect ARN scope.
Review this document and explain each finding, its impact, and the corrected policy:
{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":"*","Action":"sts:AssumeRole","Resource":"arn:aws:iam::123456789012:role/ProdDeploy","Condition":{"StringLike":{"aws:PrincipalArn":"arn:aws:iam::*:role/Deploy*"}}},{"Effect":"Allow","Action":["s3:GetObject","s3:PutObject"],"Resource":"arn:aws:s3:::prod-artifacts"}]}