AG-012

Cross-Resource Unrestricted Access

high

What Foo Guard detects

Multiple permissions grant explicitly unrestricted access across resources.

Replace wildcard permissions with the minimum required resource and action scope.