Skip to main content

New answers tagged

3 votes
Accepted

Why does AWS strongly recommend a non-self-signed, code-signing certificate?

The recommendation doesn't necessarily apply to OTA updates. It seems to be more about cases where a user is involved (like when a firmware update is installed manually). How exactly the OTA agent ...
Ja1024's user avatar
  • 9,375
0 votes

How to harden against credential stealing in EC2 via the http://169.254.169.254 API?

In 2024, an effective hardening against is type of attack is to enforce IMDSv2. Instead of exposing the Instance Metadata Service (IMDS) directly (as in IMDSv1), you need to make a PUT request first ...
Philipp Claßen's user avatar

Top 50 recent answers are included