Questions tagged [aws]
Amazon Web Services (AWS) are a set of cloud services offered by Amazon.
11
questions
27
votes
12
answers
7k
views
Is starting an AWS instance with only ssh to port 22 significantly insecure?
Unless someone has my private ssh key, how is leaving an aws instance open to 0.0.0.0 but only on port 22 via ssh insecure?
The ssh key would be distributed to a small set of people. I prefer to not ...
4
votes
2
answers
2k
views
S3 Bucket Name Obscurity as Security
Edited to clarify: *The bucket is used by EC2 instances that process its data and display parts of it to the user. The EC2-S3 interaction is invisible to the user. *
Can I assume that a public S3 ...
22
votes
2
answers
5k
views
How to use AWS KMS securely?
I am investigating using AWS KMS (Amazon Web Services Key Management Service) to decrypt an encrypted symmetric key (i.e: envelope encryption). However, to use the KMS, I need to pass it my amazon ...
- 415
10
votes
2
answers
6k
views
Is there any risk to enabling CORS with a wildcard on S3?
By default, Amazon S3 blocks cross-origin requests. However, it allows users the ability to set up per-bucket CORS policies. It offers fairly elaborate controls for which domains and methods the user ...
- 101
4
votes
1
answer
879
views
Security implications of using public subnets in AWS VPC for hosting web and job servers
I have been using AWS for hosting personal projects, mostly in the form of containerized Django web apps running on ECS with Fargate. I have referenced this article to better understand Fargate task ...
- 223
3
votes
1
answer
2k
views
Security Audit on AWS - question on findings
Just wondering about an assessment I'm doing regarding a client's AWS environment.
I'm new to AWS to I'm having to learn a lot on the go.
I used ScoutSuite and got some findings, specifically:
EC2:
*...
- 43
2
votes
2
answers
878
views
Why does my Amazon-issued certificate not show up in the certificate transparency logs?
I have an Amazon-issued certificate (via AWS Certificate Manager) for a number of subdomains (CN = *.aws.jamymahabier.nl). However, it is not showing up in the logs at crt.sh (only the Let's Encrypt-...
- 123
2
votes
2
answers
1k
views
SSH brute force entry in aws ec2 instance
I am planning to host a flask application on EC2 instance, which connects to a database. The database credentials are inside a folder on the server.
EC2 login can be done only via ssh private key. ...
1
vote
3
answers
420
views
Why AWS distributes private key to address authentication problem?
AWS provides access to EC2 by downloading the private key(.pem) into management host that connects to EC2.
AWS uses openssl tool
Key providers generally provide public key but not private key, ...
- 113
0
votes
1
answer
436
views
TLS certificate - How to assign a CN name for an EC2?
AWS console(EC2 dashboard) shows public DNS name as ec2-99-xx-xx-xx.ca-central-1.compute.amazonaws.com for an EC2 instance.
But the same AWS EC2 has a different DNS name (shown below):
$ hostname -...
- 113
0
votes
1
answer
568
views
Is it possible to securely run user defined python code in AWS?
I would like to create an app that accepts users python scripts and executes them as part of its functionality. What I am wondering is if its possible to block I/O, network and other attack vectors so ...
- 115