Attacking and securing cloud identities in managed Kubernetes part 1: Amazon EKS | Datadog Security Labs
Tags
Common Information
| Type | Value |
|---|---|
| UUID | 0a0d4c49-3206-4f91-86f4-7bc19be5a11b |
| Fingerprint | 3fb2d1d1b6a30195 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 16, 2023, midnight |
| Added to db | Aug. 12, 2023, 9:51 a.m. |
| Last updated | Nov. 17, 2024, 11:40 p.m. |
| Headline | Attacking and securing cloud identities in managed Kubernetes part 1: Amazon EKS |
| Title | Attacking and securing cloud identities in managed Kubernetes part 1: Amazon EKS | Datadog Security Labs |
| Detected Hints/Tags/Attributes | 65/1/30 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 230 | ✔ | Datadog Security Labs | https://securitylabs.datadoghq.com/rss/feed.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | af26d840e519d2f3902468224667d259.gr7.eu-west-1.eks.amazonaws.com |
|
| Details | Domain | 2 | client.authentication.k8s.io |
|
| Details | Domain | 12 | ghcr.io |
|
| Details | Domain | 1 | ip-192-168-69-116.eu |
|
| Details | Domain | 1 | calif.io |
|
| Details | Domain | 2 | projectcalico.org |
|
| Details | Domain | 1 | oidc.eks.eu-west-1.amazonaws.com |
|
| Details | Domain | 1 | oidc.eks.us-east-1.amazonaws.com |
|
| Details | Domain | 11 | sts.amazonaws.com |
|
| Details | Domain | 6 | eks.amazonaws.com |
|
| Details | Domain | 4128 | github.com |
|
| Details | File | 1 | cluster.cer |
|
| Details | File | 32 | ca.crt |
|
| Details | File | 2 | website.html |
|
| Details | File | 816 | index.html |
|
| Details | Github username | 10 | datadog |
|
| Details | md5 | 1 | AF26D840E519D2F3902468224667D259 |
|
| Details | IPv4 | 1441 | 127.0.0.1 |
|
| Details | IPv4 | 88 | 169.254.169.254 |
|
| Details | Mandiant Uncategorized Groups | 3 | UNC2903 |
|
| Details | Url | 1 | https://af26d840e519d2f3902468224667d259.gr7.eu-west-1.eks.amazonaws.com |
|
| Details | Url | 1 | https://sts.eu-west-1.amazonaws.com/?action=getcalleridentity&version=2011 |
|
| Details | Url | 1 | http://127.0.0.1:8000/website.html |
|
| Details | Url | 9 | http://169.254.169.254 |
|
| Details | Url | 20 | http://169.254.169.254/latest/meta-data/iam/security-credentials |
|
| Details | Url | 1 | http://169.254.169.254/latest/meta-data/iam/security-credentials/eks-cluster-nodegroup-ng-nodeinstancerole |
|
| Details | Url | 1 | http://127.0.0.1:8000/index.html |
|
| Details | Url | 1 | https://oidc.eks.eu-west-1.amazonaws.com/id/af26d840e519d2f3902468224667d259 |
|
| Details | Url | 1 | https://oidc.eks.eu-west-1.amazonaws.com/id/af26d840e519d2f3902468224667d259/keys |
|
| Details | Url | 2 | https://github.com/datadog/managed-kubernetes-auditing-toolkit |