[English] Spain cloud and devops community AWS SSRF VULNERABILITIES ATTACK AND DEFENSE
aws ssrf vulnerabilities attack and defense:
When a role-assigned virtual machine tries to get access to cloud resources it usually uses its internal instance metadata service (IMDS) to retrieve all the necessary authentication attributes including access/secret key and a token. But what will happen if an attacker who took over the machine tries to do the same?In this presentation we will dive into the scenario of exploiting SSRF-vulnerable application which resides on a role-assigned ec2-instance. We will also take a closer look at the existing vulnerability from a defenders’ point of view trying to find various workable solutions for mitigating such an adverse scenario.