Ensure that Role names cannot be enumerable
Your Role name might be enumerable by an attacker. There are dictionaries of most common role names that exist in the wild, known as Enumerable Role Names. Attackers are able to easily check if this role exists in your account during a Reconnaissance Stage of an attack. It is recommended to change the role's name to better protect your account.
Updated 7 months ago