Aerides
Aerides copied to clipboard
ncc-erik-steringer
An implementation of infrastructure-as-code scanning using dynamic tooling.
In this demo, we give the operators group access to call iam:CreateAccessKey for other users in the account. However, this should lead to a PMapper test case failing, since this...
In this demo, we update the API SG and allow everyone to access the instances via port 443. This should result in a test case failure with Scout Suite since...
In this demo, we put SSM on our API instances and give the support role access to SSM actions. This should result in a PMapper test failing since we're not...
In this PR demo, we show what would happen if we added some overly-broad permissions to the support staff IAM Role. There should be two checks that fail: * PMapper...
Metadata
Owner
Metadata
An implementation of infrastructure-as-code scanning using dynamic tooling.