Mitigating attacks against cloud metadata services
Smith, Peter
efending servers and workloads in public clouds creates unique challenges not encountered on-premises. The recent Capital One data breach in AWS is a clear example where an attacker gained access to the AWS instance metadata service to steal credentials and cause a breach. This talk explains: What is instance metadata and the associated service, why these little known services hold the keys to the kingdom and are so critical to the functioning of cloud applications.