Cloud Databases in AWS

Introduction

Cloud databases in the case of AWS refers to the Relational Database Service which is a prominent service on AWS that allows users to spawn database instances on the cloud and connect to them from anywhere.

Several different types and configurations of RDS exist. This also allows for an increased attack surface due to common misconfigurations and the ease with which users can work with these instances using the AWS cli and APIs.

What are we going to cover

This chapter will primarily cover common misconfigurations in RDS and see how we can use them to gain access to data on an RDS instance.

  • Attacking AWS RDS misconfigurations

  • Stealing data from an RDS snapshot by modifying the instance

  • We'll see the permissions on these snapshots,wheather these are private or public .

  • Looking into misconfigured snapshot permissions & trying to access the entire database instance.

Additional Information

No additional information for this section

Last updated