CVE-2024-28056

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and consequently...

CVE-2024-28056

The Amazon AWS Amplify CLI before version 12.10.1 contains a vulnerability where incorrectly managed role trust policies can lead to unauthorized access. When an authorized user removes the Authentication component from an Amplify project, the CLI removes the Condition property but leaves the "Ef...