AWS IAM Trust Policies: Cross-Account Misconfigurations and How to Fix Them

An IAM role has two separate policy documents: the permission policy (what the role can do) and the trust policy (who can assume it). Most security reviews focus on permissions and treat the trust pol