报告预览

ECS-cape – 劫持 Amazon ECS 中的 IAM 权限.pdf

编号：981881

PDF 129页 5.07MB 下载积分：VIP专享

下载报告请您先登录！

ECS-cape – 劫持 Amazon ECS 中的 IAM 权限.pdf

1、#BHUSA BlackHatEventsExpanding Privileges in the Cloud:Exploring Security Boundaries in Amazon ECSECScape#BHUSA BlackHatEvents$whoamiNaor HazizIsrael Software DeveloperSecurity ResearcherSweet Security#BHUSA BlackHatEvents04050601AgendaTechnical BackgroundStory TimeECScapeMitigation0203Impact Demo#B

2、HUSA BlackHatEvents33%Of Developers Using Orchestration Technologies rely on Amazon ECSCNCF Annual Survey 2021#BHUSA BlackHatEvents01Technical Background#BHUSA BlackHatEventsWhat is IAM?#BHUSA BlackHatEventsRolePolicy#BHUSA BlackHatEventsAmazonS3FullAccessAmazonEC2FullAccessCloudWatchFullAccess#BHUS

3、A BlackHatEventsRoleAssumeWhat Is Amazon ECS?ECSK8S#BHUSA BlackHatEventsECS ClusterEC2EC2#BHUSA BlackHatEventsEC2#BHUSA BlackHatEventsInstance RoleEC2#BHUSA BlackHatEventsInstance RoleEC2AmazonEC2ContainerServiceforEC2Role#BHUSA BlackHatEventsEC2#BHUSA BlackHatEventsEC2TaskService#BHUSA BlackHatEven

4、tsService#BHUSA BlackHatEventsServiceTask#BHUSA BlackHatEventsServiceTaskTaskTask#BHUSA BlackHatEventsTask#BHUSA BlackHatEventsTaskContainerContainerContainer#BHUSA BlackHatEventsContainerTaskTask RoleTask Execution Role#BHUSA BlackHatEventsTaskTask Execution Role#BHUSA BlackHatEventsTask#BHUSA Blac

5、kHatEventsContainerTaskTask Role#BHUSA BlackHatEventsEC2TaskTaskTaskRole 1Role 2Role 3ECS Launch ModesFargateEC2#BHUSA BlackHatEventsECS Launch ModesEC2#BHUSA BlackHatEvents#BHUSA BlackHatEventsEC2Instance RoleECS Agent#BHUSA BlackHatEventsEC2Instance RoleECS AgentECS Agent#BHUSA BlackHatEventsEC2EC

6、S Agent#BHUSA BlackHatEventsEC2Container Instance02Story Time#BHUSA BlackHatEventsCan you monitor ECS tasks?Sure,lets try#BHUSA BlackHatEvents#BHUSA BlackHatEventsEC2ECS Agent#BHUSA BlackHatEventsEC2ExceptThe ServiceName#BHUSA BlackHatEventsAmazon ECS task metadata endpoint#BHUSA BlackHatEvents#BHUS

友情提示

1、下载报告失败解决办法
2、PDF文件下载后，可能会被浏览器默认打开，此种情况可以点击浏览器菜单，保存网页到桌面，就可以正常下载了。
3、本站不支持迅雷下载，请使用电脑自带的IE浏览器，或者360浏览器、谷歌浏览器下载即可。
4、本站报告下载后的文档和图纸-无水印,预览文档经过压缩，下载后原文更清晰。

本文（ECS-cape – 劫持 Amazon ECS 中的 IAM 权限.pdf）为本站（竿头日上）主动上传，三个皮匠报告文库仅提供信息存储空间，仅对用户上传内容的表现方式做保护处理，对上载内容本身不做任何修改或编辑。若此文所含内容侵犯了您的版权或隐私，请立即通知三个皮匠报告文库（点击联系客服），我们立即给予删除！

温馨提示：如果因为网速或其他原因下载失败请重新下载，重复下载不扣分。