githubEdit

AWS IAM Checklist

It's assumed that we have gain access to the AWS Credentials

We can see if we have permissions using Amazon's policy simulator

Always look for policies and roles with the * symbol.

See which user do not have MFA enabled

User enumeration in IAM Panel and group enumeration

We can also enumerate roles from the same interface

Root user is super admin

Last updated