- I wrote a little something to improve the security of the EC2 metadata service. A tiny reverse proxy together with an iptables rule that only lets expected requests through. Debian packages available in a PPA. Feedback is welcome. https://github.com/stefansundin/ec2-metadata-filter 4 comments aws
Linked pages
- flAWS http://flaws.cloud/ 36 comments
- Abusing the AWS metadata service using SSRF vulnerabilities - Christophe Tafani-Dereeper https://blog.christophetd.fr/abusing-aws-metadata-service-using-ssrf-vulnerabilities/ 18 comments
- Netflix Information Security: Preventing Credential Compromise in AWS | by Netflix Technology Blog | Netflix TechBlog https://medium.com/netflix-techblog/netflix-information-security-preventing-credential-compromise-in-aws-41b112c15179 0 comments