BADPODS SERIES: EVERYTHING ALLOWED ON AWS EKS

Summary from the TLDR InfoSec newsletter

This is the first post in a series using BishopFox's BadPods, which features a variety of pod manifests with varying levels of misconfiguration, to investigate the protections included in different cloud providers' managed Kubernetes offerings. This series includes the most permissive pod manifest, which the author uses to trivially escape the pod via a mounted host path and then further escalate privileges within the account by stealing IAM credentials from IMDS.