aws - Nom. Tech. Bytes.

Nom. Tech. Bytes.

Sign in Subscribe

aws

A collection of 9 posts

Attacking AWS Part 2: EC2 & EBS Snapshots

Attacking AWS Part 2: EC2 & EBS Snapshots

This post focuses on methods used to leverage and capture information while targeting EC2 compute resources. We'll cover EC2 and associated AWS service dependencies responsible for maintaining clean security hygiene when leveraging compute on Amazon Web Services. EC2 is also responsible for running the underlying compute for EKS

Attacking AWS Part 1: Public S3 Buckets

Attacking AWS Part 1: Public S3 Buckets

This post focuses on the public exposure of s3 buckets. Testing was done using boto3 over the AWS CLI on Python v3.12. An AWS IAM user account with any level of permissions on any account is required for testing. We'll start off by assuming you've

AWS re:Invent 2023 Announcements

AWS re:Invent 2023 Announcements

re:Invent always builds hype and excitement for the future direction of AWS. However, the noise at which features and functions are released can definitely lead to fatigue. I've compiled a list below of recent annoucements which I feel are very beneficial to AWS professionals. CloudWatch Pattern grouping

AWS IAM Recon

This post will focus on tools for performing IAM permission enumeration on AWS accounts. Custom, poorly written IAM roles and policies are some of the most common misconfigurations in regards to AWS architecture. That said, we'll discuss various resources that can help you breathe easier. First is MAMIP,

AWS EKS ASAP

EKS is a powerful CaaS solution for hosting k8s in AWS. Though setting up a cluster can be a convoluted task, this quick point of reference will help you strap on those elastic pants and get deploying. We'll first dive into what deploying EKS looks like and what

AWS Threat Detection & IR

AWS Threat Detection & IR

Re:Inforce 2021 Presentation Notes The “Auto-Enable” in Organizations from a root account enables services below if enabled on new and existing member accounts. A brief touchpoint on each AWS security related service for Threat Detection & IR is provided below. GuardDuty - Uses ML to present security alerts for

ssh... Quiet Down Now

ssh... Quiet Down Now

As we all know AWS provides great solutions to a vast number of common technical problems. One such solutions excited me as a Security focused AWS Architect recently, and I wanted to share this finding aka Session Manager [https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html] . This feature

infosec Featured

☁️ Compliance

This post is about my experience while covering the infamous cloud shared responsibility model. I'm writing this because it's 2021, and people still often assume because they're utilizing a IaaS/PaaS offering it's secure! Well, I'm here to assure you

Sailing the AWS IaC Seas

devops Featured

Sailing the AWS IaC Seas

Infrastructure as Code is an incredibly valuable solution with a ton of applicable use cases in modern cloud practices. Often times I'm approached to build out solutions from scratch or from existing cloud environments using either CloudFormation (AWS IaC) or Terraform. Both these solutions present benefits in multiple