🔶 Hacking AWS end-to-end - remastered
A remastering of one of greatest cloud security talk ever given, Daniel Grzelak's Kiwicon 2016 presentation where he shows IAM principal enumeration using resource policies, abusing vendor trust relationship confused deputies, and more. Slides and code: https://github.com/dagrz/aws_pwn
https://youtu.be/8ZXRw4Ry3mQ
#aws
Post #223
699