الصلاحية الزائدة

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "InternDailyTasks",
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetObject",
        "iam:GetPolicy",
        "iam:GetPolicyVersion",
        "iam:ListPolicyVersions",
        "iam:CreatePolicyVersion"
      ],
      "Resource": "*"
    }
  ]
}

// 2026-10-28  09:12:04Z
{ "eventName": "GetPolicy",
  "userIdentity": "intern-sara",
  "sourceIPAddress": "203.0.113.24",
  "policyArn": "arn:aws:iam::111122223333:policy/waha-intern-policy" }

// 2026-10-28  09:13:41Z
{ "eventName": "ListPolicyVersions",
  "userIdentity": "intern-sara",
  "result": ["v1 (default)"] }

// 2026-10-28  09:15:09Z   CLI: aws iam create-policy-version
{ "eventName": "CreatePolicyVersion",
  "userIdentity": "intern-sara",
  "requestParameters": {
    "policyArn": "arn:aws:iam::111122223333:policy/waha-intern-policy",
    "setAsDefault": true,
    "policyDocument": {
      "Statement": [{
        "Sid": "RAZEENEscalatedViaCreatePolicyVersion",
        "Effect": "Allow",
        "Action": "*",
        "Resource": "*"
      }]
    }
  },
  "responseElements": { "versionId": "v2", "isDefaultVersion": true } }

// 2026-10-28  09:16:30Z
{ "eventName": "ListUsers",
  "userIdentity": "intern-sara",
  "errorCode": null }   // نجح… وقبل دقيقتين كان سيُرفض