Cloud Security

Demystifying Workload Identity Federation: From Custom OIDC to AWS and Azure In this blog post, we will dive deep into OIDC and WIF. Let’s say there are three levels of difficulty in workload identity. The first level, which is easier, is to use workload identity in the environment itself. For example, AWS has instance roles, and you can use them as a workload identity. Azure has managed and user identities which can be used as a workload identity. ...

From AWSLambda_ReadOnlyAccess to Full Compromise Introduction In this blog post, I want to highlight the dangers of blindly using AWS-managed policies without verifying their underlying permissions. While building an AWS lab for Red and Blue teams and researching privilege escalation scenarios, I came across several interesting AWS-managed policies. A prime example is AWSLambda_ReadOnlyAccess. Despite its seemingly restrictive name, this policy grants far more read access than one might expect. Ideally, these permissions should be split or refined to better reflect their true scope. ...