AWS Cloud Attack Vectors and Security Controls
Kavisha Sheth reviews top AWS cloud attack vectors, mapping adversary techniques to defensive detection rules and IAM governance controls.
Summary
The Expanding Enterprise Attack Surface in AWS
As organizations migrate legacy workloads to AWS, complex cloud-native architectures introduce misconfigurations and permission creep across cloud services.
Analyzing Common AWS Exploitation Chains
Kavisha Sheth analyzes real-world attack vectors, including SSRF against the EC2 Instance Metadata Service (IMDSv1), permissive S3 bucket policies, and unauthenticated Lambda triggers.
Implementing Cloud-Native Detective and Preventive Controls
Sheth maps offensive vectors directly to AWS security services—including AWS GuardDuty, Security Hub, AWS Config rules, and IAM Access Analyzer.
A Pragmatic Blueprint for Cloud Posture Hardening
The presentation provides cloud architects with a prioritized hardening checklist to enforce MFA, disable legacy metadata endpoints, and establish least-privilege IAM policies.
Related talks
DCGVR Village·30 min
Deconstructing AWS Instance Metadata Service (IMDS) exploitation, abusing SSRF to harvest temporary IAM credentials and escalate cloud permissions.
Cloud Village·27 min
Leo Tsaousis
Exploiting AWS Cognito misconfigurations to achieve privilege escalation and account takeover.
37th Annual FIRST Conference·32 min
Engineers explore architecture and security mechanisms for Enhancing Incident Response with AWS CIRT, MSSPs, and ISVs.