Permission Graph

Trace how an AI agent can reach production resources.

Permission path

support-bot

IAM Role: support

AWS IAM

S3: prod-data

RDS: customers-db

Risk reason

support-bot can attach IAM policies, granting itself a path to read the production data bucket.

Critical permission path

2 critical edge(s) on this path.