166 terms · 75/46/45
kompozit · edukator režim · za predavanje i PDF

Cloud IAM misconfiguration

Pretnja u centru, tehnike kojima se izvodi levo, odbrane koje je suzbijaju desno. Ispod — mapa faza napada: kojom tehnikom se ulazi i koja odbrana je presreće.

↘ Techniques used to carry it out5

threat · № 075 · cloud

Cloud IAM misconfiguration

Cloud IAM misconfiguration means a user, a service account, an application or a role holds more rights than it needs. In the cloud an identity is not merely a login. An identity is permission to read data, spin up resources, change networks, assume roles and delete backups.

↓ izvor: prvi po vezama Najčešći ulaz: Credential Abuse. Ključna odbrana: Secure Configuration.

↗ How it is defended against5