亚基尔·卡德科达与迈克尔·卡钦斯基与奥费克·伊塔赫_通过影子资源入侵AWS帐户.docxVIP

Breachin

BreachingAWSAc

ounts

Through

ShadowResources

YakirKadkodaMichaelKatchinskiyOfekItach

#BHUSA@BlackHatEvents

AWSAccountIDSome

AWSAccountID

Sometreatitasa

secret,othersdont

#BHUSA@BlackHatEvents

12-digitID

EachAWSaccounthasauniqueaccountID

AWSAccountID#BHU

AWSAccountID

#BHUSA@BlackHatEvents

Sometreatitasasecret,othersdont

12-digitID

EachAWSaccounthasauniqueaccountID

#B

#BHUSA@BlackHatEvents

#B

#BHUSA@BlackHatEvents

/aws/assume-worst-aws-assume-role-enumeration//aws-account-ids-are-secrets/#

/aws/assume-worst-aws-assume-role-enume