RyanJarv’s Blog

Unauthenticated Cluster Takeover in AWS ROSA 5th January 2026 - NW Recently, I discovered a critical vulnerability in Red Hat OpenShift Service affecting AWS ROSA Classic Clusters.

AWS CDK and SaaS Provider Takeover 27st August 2025 - NW Imagine you manage a SaaS platform that accesses customer AWS accounts using sts:AssumeRole.

Fast Unauthenticated Role Scanning 7 Jan 2025 - NW Just a quick blog post here, recently I’ve been trying to open-source some of my projects.

Implicit SAR – Summary 30 Aug 2024 Introduction I’d like to end the Implicit SAR series with a critical assessment of what we’ve covered so far by answering a few withstanding questions directly.

Implicit SAR – Attacking the Confused Deputy 31 Mar 2024 Introduction In this post, I’ll show how Implicit SAR could have turned a few missing security best practices into a critical non-authenticated vulnerability chain resulting in the compromise of all…

Implicit SAR – Modifying Session State 31 Mar 2024 Introduction When we think of sessions associated with a given role it’s easy to assume that they are mostly equivalent, this however is not the case.

Implicit SAR – Bypassing Session Expirations and Revocations 31 Mar 2024 Introduction Roles are preferred over IAM Users to avoid long-lived API keys.

Implicit SAR – IAM Evaluation with Implicit Self Assume Role 31 Mar 2024 Introduction In the last post I covered the two documented types of IAM sts:AssumeRole behavior.

Implicit SAR – IAM Evaluation 31 Mar 2024 Introduction This post covers the basics of how IAM behaved in the context of sts:AssumeRole; specifically the difference between Identity and Trust policies in same-account and cross-account AssumeRole scenarios.

Implicit SAR – Overview 31 Mar 2024 Introduction In September of 2022, AWS announced an update to IAM role trust policy behavior.