PMapper
PMapper copied to clipboard
New Edges: AWS Glue and DataPipeline
Pulling in some lessons learned from the "iam-vulnerable" project: https://github.com/BishopFox/iam-vulnerable .
TODO:
- Apply the following Terraform files and verify the noted permission combinations lead to Edges.
- https://github.com/BishopFox/iam-vulnerable/blob/main/modules/free-resources/privesc-paths/privesc18-PassExistingRoleToNewGlueDevEndpoint.tf
- https://github.com/BishopFox/iam-vulnerable/blob/main/modules/free-resources/privesc-paths/privesc19-UpdateExistingGlueDevEndpoint.tf
- https://github.com/BishopFox/iam-vulnerable/blob/main/modules/free-resources/privesc-paths/privesc21-PassExistingRoleToNewDataPipeline.tf
- Create a new edge checker object for Glue and for DataPipeline, maintaining with/without connectivity separation as in LambdaEdgeChecker when appropriate.