Summary
TrustOnCloud identified a flaw in how AWS Bedrock enforces IAM access controls using the
aws-marketplace:ProductId condition key, which is meant to restrict subscriptions to specific
foundation models. Their testing revealed that some Bedrock models, including those from Cohere
and Stability AI, were not consistently blocked or allowed as intended by IAM policies, posing
potential compliance and cost risks. AWS acknowledged and fixed the issue, notifying affected
customers and updating testing procedures to prevent future issues.
Affected Services
AWS Bedrock
Remediation
null
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/mer-b
Entry Status
Finalized
Disclosure Date
Mon, Jan 15th, 2024
Exploitablity Period
Until March 17th, 2024
Known ITW Exploitation
-
Detection Methods
null
Piercing Index Rating
-
Discovered by
Carlos Mora, TrustOnCloud
