// CLOUD · ORIGINAL TRAINING CHALLENGE

Cloud Shadow

Analyze a synthetic IAM policy and find the unintended wildcard permission.

Medium350 PTSOFFLINE EVIDENCE

// MISSION

Investigate the evidence

Analyze a synthetic IAM policy and find the unintended wildcard permission.

Recover the marker and submit it using the format SG{marker}.

Self-contained synthetic artifacts only. No live targets, services, devices, or external systems.

// FLAG CHECK

$ specter open cloud-shadow
[+] evidence ready
[+] local practice mode

TRAINING FLAG

Progress stored in this browser.

// EVIDENCE

{"Statement":[{"Effect":"Allow","Action":["s3:GetObject","iam:PassRole"],"Resource":"*"}],"audit_marker":"scope_before_permission"}

HINT 01

The risky permission is not the S3 read.