Questions tagged [aws]
Amazon Web Services (AWS) are a set of cloud services offered by Amazon.
273
questions
2
votes
1
answer
185
views
Controlling windows server on Amazon Web Services
Our site is ISO-27001 compliant. As part of the compliance we were advised not to use RDP to connect to the server, but rather to choose a cloud server which provides a web-interface.
Our current ...
- 291
1
vote
1
answer
1k
views
Risk of man in the middle attack on AWS S3 due to wildcard SSL certs
I see that using AWS S3 with https, it comes with a wildcard SSL cert.
Does that mean man-in-the-middle attack is possible by DNS/network rogue and redirect users into another S3 link (having the ...
- 13
1
vote
1
answer
268
views
Is It Possible to Implement Rule-Based Access Control on Amazon Web Services?
I've gone through a few security tutorials on AWS and noted that each tutorial focused on role-based access control only. Has anyone used rule-based access control on AWS? If so, could you point me ...
- 119
1
vote
0
answers
352
views
GDPR compliance in Amazon AWS
Anybody has a nice checklist/todo list to achieve GDPR compliance in Amazon AWS environments? Want to use dev-sec.io checklists, OWASP for web app, AWS Trusted Advisor. Anything else to include/...
- 977
0
votes
2
answers
334
views
what would happen if someone got their hands on my aws_access_key_id and aws_secret_access_key?
What would happen if somebody gets their hands on AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY? Does this somehow compromise my AWS account? or my buckets or whatever that might be?
I just want to ...
0
votes
1
answer
787
views
Database logs have multiple "Logon Login failed for user" from different IPs
Background: I have an SQL Server database running on Amazon RDS
The AWS dashboard has a section for logs and whenever I check the logs I see the following:
2018-04-27 06:10:26.00 Logon Error: 18456,...
- 463
1
vote
0
answers
626
views
How is SSL encryption maintained between AWS CloudFront and EC2?
So I recently set up an API on an AWS EC2 instance. To be able to serve responses over HTTPS I used Route 53 to redirect my custom domain to a CloudFront distribution which points to the EC2 instance. ...
- 119
0
votes
1
answer
1k
views
Detect and Scan Open Ports
I am trying to understand two questions -
I run Qualys/Nessus scans on periodic basis in our Azure/AWS environment and always run into issues while detecting for Open ports, A basic nmap scan would ...
- 5
1
vote
1
answer
756
views
2048 bit SSH RSA public key vs AWS KMS-encrypted text in source control
I'm trying to work out how acceptable it is to commit KMS-encrypted API keys to source control. It is (I believe) often deemed acceptable to commit public keys to source control. So, to try to compare ...
0
votes
1
answer
238
views
Certificate SAN Disclosure. How harmful can it be?
My daily job duties brought me (by mistake) to the following IP: 52.63.96.32
It appears the registrar has signed with a single certificate a "lot" of domain. https://www.shodan.io/host/52.63.96.32
...
- 695
0
votes
1
answer
134
views
Inbound Ip Visited "localhost" wordpress stack on AWS
i'm testing a webserver on an aws EC2 instance, it has a wordpress stack on it. The domain is configured properly, public static(elastic ip) redirected to main domain as well as the aws public dns. So ...
1
vote
1
answer
2k
views
Do I need to disable TLS 1.0 altogether? [duplicate]
We recently went through a third party review of our systems where the consultants have reported a finding that we have TLSv1.0 enabled. In the report they are referring to this NIST document which ...
- 7,417
9
votes
1
answer
580
views
What does Spectre mean for public cloud computing?
From a tweetstorm by security journalist Nicole Perlroth:
The most visceral attack scenario is an attacker who rents 5 minutes of time from an Amazon/Google/Microsoft cloud server and steals data ...
- 65.4k
1
vote
1
answer
461
views
Storing bank account information - AWS RDS Encryption
I currently have a requirement to store bank account information (transit numbers/account numbers/routing numbers) and I need to know how best to store them and retrieve them from the database.
I'm ...
- 113
5
votes
1
answer
853
views
AWS Tenant Restrictions
I'm a sysadmin of a medium sized chain of Italian restaurants. While I'm not dealing with patient health records or financial information I am still security focused.
I'm trying to achieve tenant ...
3
votes
2
answers
379
views
Are Amazon AWS instanceIds security sensitive?
For troubleshooting, it's useful to include HTTP response headers that indicate proxy and backend EC2 instance ids, such as:
X-Backend: i-8af67c92e0f3d89b6b
X-Via: i-5b8146e7102940c75b-us-east-2b
Is ...
- 523
1
vote
2
answers
663
views
SPF and DKIM passes for SPAM message when using SES and Google Mail
We have websites hosted on AWS, are using SES to send out mailings, and use Google Mail for sending and receiving company mail.
Every so often I receive SPAM emails to my Priority Inbox in Google ...
- 201
2
votes
2
answers
877
views
Why does my Amazon-issued certificate not show up in the certificate transparency logs?
I have an Amazon-issued certificate (via AWS Certificate Manager) for a number of subdomains (CN = *.aws.jamymahabier.nl). However, it is not showing up in the logs at crt.sh (only the Let's Encrypt-...
- 123
2
votes
2
answers
251
views
How does Amazon prevent mischief in their AWS Lambda service if I am allowed to execute code on their machine?
AWS Lambda lets me execute a piece of code on a random Linux machine it provides to me, whenever I need to run my code.
What is stopping me from executing OS level commands that let me take over the ...
- 785
0
votes
2
answers
964
views
Is it possible to buy multiple hardware MFA devices with the same key?
I would like to secure an AWS root account with a hardware MFA device, which seems to be simple enough, but I also want a backup device to store in a different location. AWS doesn't seem to support ...
- 3
1
vote
2
answers
201
views
How to make sure my web application is secured? [closed]
My backend is hosted on AWS-EC2 running ruby on rails.
My frontend is hosted on aws-s3 using angular-js.
My DB is MongoDB.
All APIs have an authentication token for user security. Every server is ...
- 119
2
votes
0
answers
5k
views
SNI and hostname provided via HTTP are different error
I am using Apache 2.2 webserver on ubuntu Aws instance. My website goes down with below errors on error log,
[ssl:error] [pid 46283] AH02032: Hostname provided via SNI and hostname provided via ...
- 135
0
votes
1
answer
358
views
AWS Elastic GPU Compute vs WPA2 [closed]
Looking at cracking a WPA/WPA2 handshake predetermined at 8 Characters long only. This means that there are: 208,827,064,576 possible combinations.
Looking at toms hardware page and Rockfish Sec ...
- 151
2
votes
1
answer
943
views
http requests from server itself
I am running a website on AWS EC2 instance. I am logging http requests headers. When I checked the logs, I noticed that there are many requests from the AWS EC2 instance public ip.
Example:-
AWS ...
- 123
0
votes
2
answers
210
views
What kind of security is needed for simple REST API on Amazon's AWS
I am envisioning a simple REST API for my app only that essentially functions as a proxy server for some organization's API. Thus, no sensitive information is stored or available through the my API.
...
- 101
1
vote
2
answers
1k
views
Apache Access Log Indicates DOS Attack? Or any other attack? [duplicate]
Below is my apache access log.
175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD http://xx.xxx.xx.xxx:80/mysql/admin/ HTTP/1.1" 301 -
...
175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD ...
- 11
1
vote
1
answer
613
views
Are there solutions to managing AWS root keys by a team?
Within our corporation, we have a dedicated team that manages our AWS footprint. For each dev/app team, we provision a new account with a VPC and some networking to attach it to our pan-galactic ...
- 111
5
votes
2
answers
7k
views
Finding the company name by the AWS IP address [closed]
Is there any way to find out company/domain name of the company name by a given AWS IP address owned by them?
nslookup and centralops.com will show only indicate the IP is on AWS.
- 151
2
votes
1
answer
212
views
UK healthcare encryption obligations
I'll soon be working on upgrading a system which contains a MYSQL server and redis server on AWS
It works by querying two entire tables decrypting all of the contents and then putting the result in ...
- 121
12
votes
2
answers
2k
views
AWS Security - Dev Test Staging Production Environments
Right now all our systems are in a traditional data center and traditional network topology.
We're planning to migrate to AWS and in doing so we're trying to figure out how to implement our dev/test/...
- 613
1
vote
1
answer
707
views
Whitelist VPN provider's IP address in cloud service provider
I wonder how safe is it to whitelist honorable VPN service provider's IP (for example NordVPN) in, for example Azure/AWS to use RDP/SSH? Is it any better then whitelisting local ISP's IP assigned to ...
- 113
1
vote
2
answers
254
views
HSM key management system on AWS/Azure
I need to store user database credentials securely for an application to access.
I have considered:
- using AWS RDS with an encrypted PostgreSQL instance
- using the AWS key management system, backed ...
- 111
5
votes
2
answers
1k
views
Best Practice for MFA on Root AWS Accounts
I would like to enable multi-factor authentication on my organization's AWS root account, however I'm unsure of the best practices on how to do so.
We already have separate IAM accounts for each ...
- 103
12
votes
1
answer
2k
views
Does the TLS 1.0 support on CloudFront create a vulnerability when only TLS 1.2 is enabled on the Origin side?
We currently host our website on AWS with CloudFront.
CloudFront currently does not support disabling TLS 1.0 or 1.1 on the Viewer side. It only provides support for limiting access to TLS 1.2 on the ...
- 241
1
vote
1
answer
420
views
which places are used to store the the encryption key? [duplicate]
So i have an encryption key which i will use to encrypt data or sign data with it. But in order make it possible to ensure the data integrity, i have to keep the key secret. So i thought of spliting ...
- 35
1
vote
3
answers
1k
views
How does AWS authentication work?
AWS APIs use access key ID and secret access key for authenticating the API calls. How exactly does it work and how is it different from SSH ?
- 165
2
votes
1
answer
1k
views
Does this look like a DDOS attack?
I've put up a small proof of concept web api on AWS infrastructure (elastic beanstalk) using their free tier. My app is working fine, but I'm seeing a lot of this in the access logs:
172.xxx.xxx.xxx -...
- 123
0
votes
1
answer
2k
views
Amazon AWS Kali - Metasploit
I'm using the Amazon marketplace Kali and I'm trying to test CVE-2017-0199 to see if my proxy settings to block application/hta content are working.
There is a module in metasploit that allows me to ...
- 9
2
votes
1
answer
733
views
Oracle (CVE-2016-2107) vulnerability on haproxy + Apache + (AWS vs private hosting)
We have a privately hosted production system and an AWS machine we use for testing. Both systems have the same structure:
SSL termination with haproxy,
passing to an Apache server hosting a rails ...
- 131
1
vote
1
answer
1k
views
AWS KMS same key for every request
I've been trying to use KMS to store sensitive personal data. We generated a CMK and are using the API/Encrypt over https. The idea was to store login information (emails) using KMS, we are using a ...
- 113
1
vote
0
answers
164
views
Amazon sign in/sign up suspicious problems [closed]
I am trying to sign up for Amazon Web Services. I went through the whole procedure and there were no issues. It told me to wait 24 hours until my account was activated. I came back the next day, and ...
7
votes
2
answers
5k
views
How to securely store secrets in Docker container?
The application I'm working on has more than a dozen of secrets, SSL certificates and API keys. Currently I have a file that's added into .gitignore and it contains all my secrets. How to securely ...
- 323
6
votes
3
answers
1k
views
Is it OK to pass credentials to the client to allow it to upload files to Amazon S3?
Our mobile app will be uploading images to AWS S3. The question is whether to do one of the following options:
Upload the image to our APIs server, then our APIs server uploads the image to S3
Pros: ...
- 163
1
vote
1
answer
190
views
Network address (DNS) translation on Amazon Web Services (Ec2)
I am trying to figure out better ways to practice my computer defense/ infosec skills. If someone was to set up a honeypot (e.g., MHN) on AWS/EC2 server and then try to launch attacks from a local ...
- 93
1
vote
1
answer
130
views
Any known risks with Elastic File System?
I want to give some of my clients the ability to write files via SFTP, which later I can read from my main server.
Since I'm using EC2, to do so I simply opened an Elastic File System (EFS) and ...
- 125
0
votes
3
answers
467
views
How to achieve other security compliances/certifications on AWS after satisfying HIPAA? [closed]
Our infrastructure is built entirely on AWS and we went through the HIPAA process to ensure that our system is HIPAA-compliant. Where should we look or what next steps can we take to obtain other ...
- 101
0
votes
3
answers
887
views
is sms two factor authentication possible to add to SSHing into an AWS EC2?
I'd like to know if I can further secure an AWS EC2 stack (in addition to the .pem file and the allowed SSH inbound ip address security-group)
by requiring that an sms authentication code be entered ...
- 149
0
votes
1
answer
451
views
mongodb --auth option
Suppose I run mongodb as a service with the --auth option (requiring a username and password to CRUD data) in an AWS EC2 shell (which does not ask for a password when you sudo)
Now, suppose someone ...
- 149
0
votes
1
answer
202
views
Allowing customer to generate a secret key for securing RDS instance on AWS
I have an microservice architecture running on AWS ECS cluster using Postgres and Node and there is this requirement that we need to somehow allow our client to lock our database with a secret key ...
- 101
1
vote
2
answers
173
views
If I use an AWS machine to connect to "Website ABC" through VPN, will "Website ABC" know I'm connecting from an AWS machine?
By my understanding of how VPN's work the answer is no because the VPN doesn't reveal the source IP is from AWS. But, I asked this question on Quora and everyone is saying they can still see the AWS ...
- 161