hard20 pts · first answer countscloud-securityawsweb-security
SSRF and cloud instance metadata
An attacker abuses an SSRF bug in a web app on an AWS EC2 instance to request http://169.254.169.254/latest/meta-data/iam/security-credentials/ and steals the role credentials. Which control most directly blocks this technique?
Discussion 0
Join free to post in the discussion.
Related questions
- Spot the attack in a web logCybersecurity Analyst
- CloudTrail logging was stoppedCybersecurity Analyst
- Is this S3 bucket public?Cybersecurity Analyst
- Hidden escalation with PassRoleCybersecurity Analyst
- Fixing a CORS errorFrontend Developer
- Where to keep a session tokenFrontend Developer
- Secret key with NEXT_PUBLIC_ prefixFrontend Developer
- Preventing XSS from user HTMLFrontend Developer