Preventing the Cross-Service Confused Deputy Attack on AWS

ACM.336 Adding Conditions to A Generic AWS Service Role CloudFormation Template