Hands-on lab
IAM PutRolePolicy PrivEsc
You can assume a role that grants you access to an Amazon S3 bucket. However, you've discovered an IAM misconfiguration that will enable you to escalate your privileges. Use iam:PutRolePolicy to grant this role increased privileges through custom IAM policies. Then, assume the role to obtain access to sensitive data in Secrets Manager that your IAM user would otherwise be restricted from accessing. You have successfully finished the lab once you've submitted the stored secret in plaintext after decoding it.
Comments
Loading comments…