AWS (mis)configuration from an attacker’s-eye view
summary
Quick, practical tour of real AWS misconfigurations with live demos and measurable results: uses aws-cli and the IAM Policy Simulator to enumerate privileges, finds three surprising privilege‑escalation chains that allow role chaining into higher‑privilege accounts, demonstrates exploitable S3 bucket ACLs and overly permissive Lambda triggers, and builds a proof‑of‑concept that achieves persistent access and exfiltrates objects. Includes exact CLI commands, Terraform/CloudFormation anti‑patterns to avoid, and remediation steps that were validated on test accounts.
AI-written summary · about
related talks
46mAttacking AWS: The Full Cyber Kill Chain
47mBringing a Machete to the Amazon
37mLocking Down the Security of IAM
36mGone in 60 milliseconds: Offensive security in the serverless age
43mThink like a HACKER
20mFantastic AWS Attacks and Where to Find Them
46mHardening AWS Environments and Automating Incident Response for AWS Compromises
35mAccount Jumping Post Infection Persistency & Lateral Movement in AWS