3 ms·
This type of attacks is why i’m not a big fan of managed identities (instance roles) in cloud providers. Suddenly one has to be very careful on what is on the O
by xiwenc 5y ago
This type of attacks is why i’m not a big fan of managed identities (instance roles) in cloud providers. Suddenly one has to be very careful on what is on the OS level which creates a higher risk for compromise. This risk increases further for the cloud service providers themselves to because there’s a need for control plane identities and the service-user identities.
- nijave 5y agoThis wasn't really an instance role, though. It was plain old credentials for a web service saved to disk (could have easily been a username/password or public/private key pair)