CVE-2024-28056

The Amazon AWS Amplify CLI before version 12.10.1 incorrectly configures the role trust policy for IAM roles associated with Amplify projects. When an authorized user removes the Authentication component from a project built between August 2019 and January 2024, the CLI removes the Condition prop...