Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Do(n’t) try this at work - Technically, you _ca...

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Ben Bridts Ben Bridts
May 27, 2021
220
0

Do(n’t) try this at work - Technically, you _can_ do this

Avatar for Ben Bridts

Ben Bridts

May 27, 2021

More Decks by Ben Bridts

See All by Ben Bridts
That's allowed? - Using IAM Roles Anywhere without AWS Private CA
Avatar for Ben Bridts benbridts
0
34
Using IAM Roles Anywhere for free
Avatar for Ben Bridts benbridts
1
57
The Hidden Costs of Managed Open Source
Avatar for Ben Bridts benbridts
0
73
re:Invent re:Cap 2023: Evolving your architecture
Avatar for Ben Bridts benbridts
0
83
A closer look at new ways to manage access - EKS Pod Identiy and S3 Access Grant
Avatar for Ben Bridts benbridts
0
46
From ‘huh?’ to privilege escalation
Avatar for Ben Bridts benbridts
0
62
re:Invent re:Cap - Removing Heavy Lifting
Avatar for Ben Bridts benbridts
0
130
Policy as Code: Putting best practices in your repository
Avatar for Ben Bridts benbridts
0
220
(Don't) try this at work - Lightning Talk
Avatar for Ben Bridts benbridts
0
170

Featured

See All Featured
世界の人気アプリ100個を分析して見えたペイウォール設計の心得
Avatar for Akihiro Kokubo akihiro_kokubo
PRO
74
42k
Leadership Guide Workshop - DevTernity 2021
Avatar for David Neal reverentgeek
1
370
New Earth Scene 8
Avatar for Sydney Stone popppiees
4
2.6k
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
63
46k
Getting science done with accelerated Python computing platforms
Avatar for Jacob Tomlinson jacobtomlinson
2
490
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
66
8.6k
Docker and Python
Avatar for Tania Allard trallard
47
4.2k
The untapped power of vector embeddings
Avatar for Frank van Dijk frankvandijk
2
1.9k
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
590
A Tale of Four Properties
Avatar for Chris Coyier chriscoyier
163
24k
[SF Ruby Conf 2025] Rails X
Avatar for Vladimir Dementyev palkan
3
1.4k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
9
1.6k

Transcript

  1. Do(n’t) try this at work Technically, you can do this

    Ben Bridts

  2. https://mobile.twitter.com/benbridts/status/1371812381161103362 https://via.benbridts.be/comsum/tweet

  3. https://twitter.com/ben11kehoe/status/1074288317108232192 https://via.benbridts.be/comsum/packrat

  4. https://sprocketfox.io/xssfox/2020/03/05/bigbuckopsworks/ https://via.benbridts.be/comsum/bigbucks

  5. https://github.com/njbmartin/diggydb-nodejs https://via.benbridts.be/comsum/diggy

  6. Using your access key

  7. AWS Management Console

  8. https://docs.aws.amazon.com/cli/latest/reference/iam/delete-login-profile.html

  9. https://docs.aws.amazon.com/IAM/latest/UserGuide/console_controlling-access.html More info: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html

  10. None
  11. None
  12. None
  13. None

  14. https://signin.aws.amazon.com/federation? Action=login& Issuer=a+python+script& Destination=https%3A%2F%2Fconsole.aws.amazon.com%2F& SigninToken=ow8X9[...]XAyan

  15. Do • Simplify switching between accounts • Start a new

    browser for every account Don’t • Use credentials from EC2 / Lambda / CodeBuild / … • Block console access

  16. Infinite Storage

  17. AWS CloudShell

  18. https://aws.amazon.com/cloudshell/faqs/

  19. https://aws.amazon.com/cloudshell/faqs/

  20. https://signin.aws.amazon.com/switchrole https://docs.aws.amazon.com/cli/latest/reference/sts/assume-role.html

  21. None
  22. None

  23. https://botocore.amazonaws.com/v1/documentation/api/latest/reference/loaders.html

  24. https://github.com/iann0036/vscode-aws-cloudshell https://via.benbridts.be/comsum/vscode

  25. Reducing Errors The easy way

  26. Amazon CloudWatch

  27. None

  28. https://…execute-api.eu-west-1.amazonaws.com/Prod/run https://…execute-api.eu-west-1.amazonaws.com/Prod/run?fail=y

  29. None
  30. None
  31. None

  32. https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html

  33. None

  34. Thank you! Ben Bridts [email protected] @BenBridts | @WeAreCloudar www.cloudar.be