News for hackers. Stuff that matters.

A comment on How I use the good parts of AWS. Parent comment

Re:How I use the good parts of AWS by poxrud on Sunday July 28, 2019 @09:15AM (#20547366)
What if you have a lambda with a full admin role that is not sanitizing its inputs? Or maybe it's using an outdated file parsing library (csv/yaml) with a vulnerability. Now your entire AWS account could potentially be compromised.
[ Parent | on HN ]
Re:How I use the good parts of AWS by DVassallo on Sunday July 28, 2019 @01:31PM (#20548737)
Yes, I would use a restricted role for Lambda too. Anything that gets creds in user space gets restricted permissions: EC2, Lambda, ECS, etc.
[ Parent | on HN ]