Skip to content

Commit

Permalink
a
Browse files Browse the repository at this point in the history
  • Loading branch information
carlospolop committed Feb 9, 2024
1 parent 22dcc7e commit c00a12f
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -247,7 +247,8 @@ Also worth noting, the script stopped the EC2 instances to detach and delete the

Next, return to the key policy in the 'attacker' account and remove the 'Outside Encryption' policy rule from the key policy.

```{
```json
{
"Version": "2012-10-17",
"Id": "key-consolepolicy-3",
"Statement": [
Expand Down
4 changes: 2 additions & 2 deletions pentesting-cloud/aws-security/aws-services/aws-iam-enum.md
Original file line number Diff line number Diff line change
Expand Up @@ -347,7 +347,7 @@ aws identitystore list-group-memberships-for-member --identity-store-id <store-i

It's possible to create inside the folder `$HOME/.aws` the file config to configure profiles that are accessible via SSO, for example:

```tsconfig
```ini
[default]
region = us-west-2
output = json
Expand Down Expand Up @@ -378,7 +378,7 @@ When a **profile from SSO is used** to access some information, the credentials

Moreover, **more credentials** can be stored in the folder **`$HOME/.aws/cli/cache`**. This cache directory is primarily used when you are **working with AWS CLI profiles** that use IAM user credentials or **assume** roles through IAM (without SSO). Config example:

```typoscript
```ini
[profile crossaccountrole]
role_arn = arn:aws:iam::234567890123:role/SomeRole
source_profile = default
Expand Down

0 comments on commit c00a12f

Please sign in to comment.