4 ms·
This is what I’m curious to learn. What can an attacker do with an AWS account ID? How is that any different from knowing someone’s email address?
by SamuelAdams 3y ago
This is what I’m curious to learn. What can an attacker do with an AWS account ID? How is that any different from knowing someone’s email address?
- sylens 3y agoIf the account and its resources are properly configured - not much. But that can be easier said than done for many organizations, especially when you have lots of different teams configuring their own environments.
- deleted 3y ago[deleted]
- quickthrower2 3y agoUseful social engineering datapoint
- coredog64 3y agoOnce I have an AWS account ID, my next trick is to grant cross-account bucket policies to discover role names in the account.
- baby_souffle 3y agoHow does this work?
- fcoelho 3y agoIf you put a role ARN in the principal section of a bucket policy, AWS will check if the role exists and fail the policy update request if not. Even if it's not in the same account. Don't know if there's another way but you can manually enumerate roles from there