Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [aws]

Amazon Web Services (AWS) are a set of cloud services offered by Amazon.

Filter by
Sorted by
Tagged with
28 votes
12 answers
7k views

Is starting an AWS instance with only ssh to port 22 significantly insecure?

Unless someone has my private ssh key, how is leaving an aws instance open to 0.0.0.0 but only on port 22 via ssh insecure? The ssh key would be distributed to a small set of people. I prefer to not ...
WestCoastProjects's user avatar
4 votes
2 answers
2k views

S3 Bucket Name Obscurity as Security

Edited to clarify: *The bucket is used by EC2 instances that process its data and display parts of it to the user. The EC2-S3 interaction is invisible to the user. * Can I assume that a public S3 ...
David_Springfield's user avatar
23 votes
2 answers
5k views

How to use AWS KMS securely?

I am investigating using AWS KMS (Amazon Web Services Key Management Service) to decrypt an encrypted symmetric key (i.e: envelope encryption). However, to use the KMS, I need to pass it my amazon ...
Vanita's user avatar
  • 425
10 votes
2 answers
6k views

Is there any risk to enabling CORS with a wildcard on S3?

By default, Amazon S3 blocks cross-origin requests. However, it allows users the ability to set up per-bucket CORS policies. It offers fairly elaborate controls for which domains and methods the user ...
user2719333's user avatar
4 votes
1 answer
1k views

Security implications of using public subnets in AWS VPC for hosting web and job servers

I have been using AWS for hosting personal projects, mostly in the form of containerized Django web apps running on ECS with Fargate. I have referenced this article to better understand Fargate task ...
briancaffey's user avatar
3 votes
1 answer
2k views

Security Audit on AWS - question on findings

Just wondering about an assessment I'm doing regarding a client's AWS environment. I'm new to AWS to I'm having to learn a lot on the go. I used ScoutSuite and got some findings, specifically: EC2: *...
mbr_uk's user avatar
  • 43
2 votes
2 answers
1k views

SSH brute force entry in aws ec2 instance

I am planning to host a flask application on EC2 instance, which connects to a database. The database credentials are inside a folder on the server. EC2 login can be done only via ssh private key. ...
Always a newComer's user avatar
2 votes
2 answers
929 views

Why does my Amazon-issued certificate not show up in the certificate transparency logs?

I have an Amazon-issued certificate (via AWS Certificate Manager) for a number of subdomains (CN = *.aws.jamymahabier.nl). However, it is not showing up in the logs at crt.sh (only the Let's Encrypt-...
Jamy Mahabier's user avatar
1 vote
3 answers
454 views

Why AWS distributes private key to address authentication problem?

AWS provides access to EC2 by downloading the private key(.pem) into management host that connects to EC2. AWS uses openssl tool Key providers generally provide public key but not private key, ...
overexchange's user avatar
0 votes
1 answer
716 views

Is it possible to securely run user defined python code in AWS?

I would like to create an app that accepts users python scripts and executes them as part of its functionality. What I am wondering is if its possible to block I/O, network and other attack vectors so ...
achyrd's user avatar
  • 115
0 votes
1 answer
515 views

TLS certificate - How to assign a CN name for an EC2?

AWS console(EC2 dashboard) shows public DNS name as ec2-99-xx-xx-xx.ca-central-1.compute.amazonaws.com for an EC2 instance. But the same AWS EC2 has a different DNS name (shown below): $ hostname -...
overexchange's user avatar