WHAT DO ATTACKERS KNOW ABOUT YOUR AWS ACCOUNT?

Summary from the TLDR InfoSec newsletter

Much of the common wisdom around Cloud Security as well as CNAPP tooling does not consider the discoverability aspect of exploiting resources. This post enumerates some prior work on AWS reconnaissance techniques such as exploiting CDK naming, brute forcing SQS queues, abusing misconfigured ECR policies, and domain takeover via deleted S3 buckets. The author then introduces a new tool that they created called awseye that can enumerate discoverable resources given an AWS account ID.