News for hackers. Stuff that matters.

A comment on AWS Session Manager: less infrastructure, more features. Parent comment

Re:AWS Session Manager: less infrastructure, more features by x3n0ph3n3 on Monday March 16, 2020 @08:23PM (#22599951)
AmazonSSMManagedInstanceCore is still too much access, it has unscoped ssm:GetParameter! I hope you weren't trying to protect any secrets in ParameterStore!
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by acdha on Monday March 16, 2020 @09:25PM (#22600483)
Doesn’t that still fail if you don’t also have the corresponding decrypt KMS permission?
[ Parent | on HN ]