News for hackers. Stuff that matters.

A comment on I discovered thousands of open databases on AWS. Parent comment

Re:I discovered thousands of open databases on AWS by tehbeard on Monday January 31, 2022 @01:50AM (#30145279)
Honestly, you'd do better scripting the aws cli to update the sec group with your IP address, which is how we've handled WfH for server SSH/plesk/SQL access.

It's like half a dozen lines of bash, I'll see if I've got it on my home pc.

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by LilBytes on Monday January 31, 2022 @08:14AM (#30147530)
SSM Port Forwarding and Tailscale are your friend. I'm using a mixture of both with most staff WFH now and their home IP addresses not being static.

Tailscale especially is an amazing product though I've only had it running at work and home for around a month. All that said, a simple script as you pointed out is also great :)

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by bombcar on Monday January 31, 2022 @08:17AM (#30147556)
What’s fun is when those IPs remain in the rulesets even after they’re no longer used or needed - and the residential DHCP changes and now someone else has a direct line.

Or it points to an AWS IP that eventually gets handed back and recycled …

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by tehbeard on Monday January 31, 2022 @12:38PM (#30150985)
And that's where you both implement and act on security policies to mitigate and avoid this based on the threat model you're up against.
[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by noduerme on Monday January 31, 2022 @02:32AM (#30145478)
That's a cool idea! Never dawned on me to do that.
[ Parent | on HN ]