News for hackers. Stuff that matters.

A comment on The State of AWS Security.

Re:The State of AWS Security by viraptor on Wednesday October 12, 2022 @04:33AM (#33174370)
These are all interesting and worth looking at, but I found some metrics weird too. For example:

> 40 percent of organizations have at least one IAM user that has AWS Console access and does not have multi-factor authentication

Yeah, I hope your last resort, non-root account is locked in a safe place and has no multi-factor on it. Statistics are cool, but some context behind the findings is also useful.

Similar story with the active root accounts. If they exist only on paper in a safe, that's fine.

[ Parent | on HN ]
Re:The State of AWS Security by jffry on Wednesday October 12, 2022 @09:16AM (#33176486)
The root user is not an IAM user and probably is not counted among those statistics. Enumerating IAM users won't include the root user, so it depends on how exactly they got that 40% metric

(Root user ARN is arn:aws:iam::555555555555:root versus IAM users which have ARNs like arn:aws:iam::555555555555:user/USERNAME)

[ Parent | on HN ]
Re:The State of AWS Security by christophetd on Wednesday October 12, 2022 @09:41AM (#33176825)
One of the authors here - confirming that "40 percent of organizations have at least one IAM user that has AWS Console access and does not have multi-factor authentication" is about IAM users and does not include the root user.
[ Parent | on HN ]