Skip to the page
CloudArqStart free

Blog

Notes from building CloudArq, on who a trust policy lets into your cloud.

  1. The one-character fix that lets other organizations into your cloud

    When new repositories stopped matching an old trust condition in July, the quickest repair widened it. Here is how to check yours.

  2. What is <something>.amazonaws.com doing in my trust policy?

    It is an AWS service, not an outside company, named so that the service can use the role you made for it.

  3. There's a 12-digit AWS account in my trust policy. Whose is it?

    Check the number against the vendor's own documentation, check for an external ID, and check what the role allows; a number that no vendor page names is the one to chase.