FIND HIDDEN AWS RESOURCES WITH EFFECTIVE WORDLISTS

Summary from the TLDR InfoSec newsletter

This post proposes a method for generating wordlists to enumerate resources in a target AWS account using Awseye. The process involves exporting mentions from Awseye, normalizing the account IDs and regions, and then counting and sorting the results to see the most commonly mentioned resources. The post highlights some alternatives such as parsing AWS documentation, querying Sourcegraph, or using AI-generated lists.