Hacking-the-Cloud / hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

Home Page:https://hackingthe.cloud

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[Bug] SneakyEndpoints: STS not working

Frichetten opened this issue · comments

I got a report that SneakyEndpoints is only working with S3 at the moment. Need to spin it up and test a bit. This may also be a good time to add some additional details to the HtC article.

I'm assuming a default changed in Terraform causing it to no longer work.

Did a little triage on this. Turns out the correct problem is that STS is NOT working. All other endpoints are fine. The reason is that the default behavior of the CLI on Amazon Linux is to use the global endpoint for STS, and the VPC endpoint uses the regional one. I'm working on a fix and will push when ready.

Taken care of in #292.