Scenario | IAM Privesc by Key Rotation

RhinoSecurityLabs / cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

BSD 3-Clause "New" or "Revised" License

2.98k stars 626 forks source link

Closed andrew-aiken closed 1 year ago

andrew-aiken commented 1 year ago

New Scenario iam_privesc_by_key_rotation
- Exploit weak IAM policies to rotate another users access key and add MFA to access the role

@jdearmas could you look over the scenario