npm/@hulumi/policies

@hulumi/policies: CIS 1.16 admin policy bypass for inline and attached IAM policies

Modified: 9/10/2026

@hulumi/policies: Stack-wide evidence bypassed Cloudflare and deployment-governance guardrails

Modified: 9/10/2026

@hulumi/policies has a HULUMI-H5 bypass via decoy sibling resources targeting a different bucket

Modified: 9/10/2026

@hulumi/policies: HULUMI-H1 SecureBucket parent spoof bypass

Modified: 9/10/2026

@hulumi/policies bypasses IAM-role policy checks when the role trusts multiple OIDC providers

Modified: 9/10/2026

@hulumi/policies: GitHub OIDC trust policy bypass via AWS set-qualified condition operators

Modified: 9/10/2026

@hulumi/policies bypasses policy packs with a forged Pulumi-URN logical name

Modified: 9/10/2026