AWS
This section covers common AWS misconfigurations that lead to data exposure or privilege escalation. Each subpage provides a description, hands-on proof steps, and concrete remediation.
In this section
- Public S3 Buckets and ObjectsS3 buckets with public access allow anyone on the internet to list or read objects.
- IAM Privilege Escalation PathsOver‑permissive IAM policies enable users to escalate privileges in many ways: iam:PassRole to powerful roles…
- EC2 Instance Metadata Service (IMDSv1)IMDSv1 is vulnerable to server‑side request forgery (SSRF).
- Open Security Groups0/0 or ::/0 to sensitive ports (SSH 22, RDP 3389, databases) expose workloads to the internet, enabling brute‑force and exploit scanning.
- CloudTrail Gaps or TamperingCloudTrail records management and data events across your AWS accounts.
- S3 Website and Origin MisconfigurationsStatic website buckets and S3 origins fronted by CloudFront can unintentionally expose private content if…
- Lambda Over-Privileged Roles and SecretsLambda functions often run with overly broad IAM roles and store secrets in environment variables or layers,…
- ECR/ECS MisconfigurationsPublic or weakly protected container registries and task roles enable image theft and privilege abuse.
- RDS Public AccessPublicly accessible RDS instances or lax security groups expose databases to the internet.
- Cross-Account Trust AbuseOverly permissive role trust policies allow external principals to assume roles in your account, including third‑party vendors or unknown accounts.
Last updated
