Extracting Data From S3 As The Attacker
Our previous blog post discussed securing S3 buckets (you can find it here), but how might you steal data from those S3 buckets if you were an attacker? This blog post will explore some...
Tagged: IAM
AWS IAM Policies – Customer Managed VS AWS Managed. Which is better?
An AWS policy is a JSON document that defines a user role, or service’s permissions. AWS provides a bunch of pre-configured policies, otherwise known as AWS-managed policies. Alternatively, you can create your own, which...
Why IAM:PassRole Can Be Dangerous If Not Configured Correctly
What happens when IAM:PassRole is not configured correctly? A quick demo of an IAM:PassRole attack.