4 ms·
He'd have to somehow make outbound requests from the server. IIRC, the default AWS VPC config would prevent this. Not sure about other cloud environments. Wh
by saryant 9y ago
He'd have to somehow make outbound requests from the server. IIRC, the default AWS VPC config would prevent this. Not sure about other cloud environments.
Where I work, outbound requests must be made through proxy servers which have a whitelisted set of allowed domains, which is only allowed after a security review.
- deleted 9y ago[deleted]
- tyingq 9y agoYou can exfiltrate data a number of ways though. DNS requests might be one obvious method.
- mwarkentin 9y agoAWS has GuardDuty now which can monitor for this type of traffic for pretty cheap.
- true_tuna 9y agoAWS default VPC config whe does not block outbound by default. Neither in the security group nor the ACL. And of the half dozen AWS hosted startups I’ve worked for nobody restricts outbound yet. “Security nice to have, not prioritized yet”