Getting Started with Hacking AWS ECS

Getting Started with Hacking AWS ECS

Cloud Security Podcast - This month we are talking about "Breaking the AWS Cloud" and next up on this series, we spoke to Gafnit Amiga (Gafnit's Linkedin), VP of Security Research at Lightspin who recently discovered the AWS Elastic Container Registry Public (ECR Public) vulnerability. She spoke to us about how she goes about doing cloud security research and what AWS ECS and ECR is.

Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv

Host Twitter: Ashish Rajan (@hashishrajan)

Guest Twitter: Gafnit Amiga (Gafnit's Linkedin)

Podcast Twitter - @CloudSecPod @CloudSecureNews

If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:

- Cloud Security News

- Cloud Security Academy

Spotify TimeStamp for Interview Questions

(00:00) Introduction
(02:28) snyk.io/csp
(02:57) A bit about Gafnit
(05:15) What is AWS ECS and ECR?
(08:18) Why do people use ECS and ECR?
(09:58) The ECR vulnerability Gafnit discovered
(15:16) Vulnerability scanning for containers in AWS ECR
(16:42) How do you find undocumented APIs in AWS?
(17:58) Attack techniques in AWS
(22:43) How to protect your AWS accounts?
(25:14) Focus areas for Cloud Security Research in 2023
(25:48) Finding vulnerability through research
(29:00) Resources for Cloud Security Research

(31:04) The Fun Section

See you at the next episode!

Avsnitt(344)

WHAT IS INFRASTRUCTURE AS CODE SECURITY? - Barak Schoster

WHAT IS INFRASTRUCTURE AS CODE SECURITY? - Barak Schoster

In this episode of the Virtual Coffee with Ashish edition, we spoke with Barak Schoster Goihman (@barakschoster) is the Co-Founder and CTO of Bridgecrew (@Bridgecrewio). Host: Ashish Rajan - Twitter...

14 Mars 202138min

INCIDENT RESPONSE IN AWS CLOUD

INCIDENT RESPONSE IN AWS CLOUD

In this episode of the Virtual Coffee with Ashish edition, we spoke with Toni de la Fuente (@toniblyx) is the Senior Security Consultant at AWS (@AWSCloud) and author of Prowler - AWS Security Tool. ...

7 Mars 202145min

How to become a CLOUD SECURITY ENGINEER IN 2021?

How to become a CLOUD SECURITY ENGINEER IN 2021?

In this episode of the Virtual Coffee with Ashish edition, we spoke with Nicholas McLaren (Linkedin - nmclarencys) is the Cloud Security Engineer, ByteChek(@Bytechek). Host: Ashish Rajan - Twitter @...

28 Feb 202147min

Kubernetes Security at Scale in A CI/CD Pipeline - Michael Fraser

Kubernetes Security at Scale in A CI/CD Pipeline - Michael Fraser

In this episode of the Virtual Coffee with Ashish edition, we spoke with Michael Fraser (@itascode) is the Chief Architect, Co-Founder at refactr (@RefactrIT). Host: Ashish Rajan - Twitter @hashishr...

21 Feb 202156min

Container Security in AWS at Scale - Ben Tomhave

Container Security in AWS at Scale - Ben Tomhave

In this episode of the Virtual Coffee with Ashish edition, we spoke with Ben Tomhave (Linkedin - @btomhave) is the Principal, Falcon’s View Consulting (@FalconsView). Host: Ashish Rajan - Twitter @h...

14 Feb 202153min

CISO Challenges in 2021 - Zane Lackey Signal Sciences, Fastly

CISO Challenges in 2021 - Zane Lackey Signal Sciences, Fastly

In this episode of the Virtual Coffee with Ashish edition, we spoke with Zane Lackey, CISO & Co-Founder Signal Sciences, which is now owned by Fastly. Host: Ashish Rajan - Twitter @hashishrajan Gue...

10 Feb 202151min

Cloud Security in $25 Billion dollar Company - Siemens USA

Cloud Security in $25 Billion dollar Company - Siemens USA

In this episode of the Virtual Coffee with Ashish edition, we spoke with Kurt John, Chief CyberSecurity Officer CISO at Siemens USA Host: Ashish Rajan - Twitter @hashishrajan Guest: Kurt John - Lin...

7 Feb 202154min

Security Chaos Engineering Experiments for Beginners

Security Chaos Engineering Experiments for Beginners

In this episode of the Virtual Coffee with Ashish edition, we spoke with David Lavezzo, Director of Security Chaos Engineering at Capital One Host: Ashish Rajan - Twitter @hashishrajan Guest: David...

31 Jan 202135min

Populärt inom Teknik

uppgang-och-fall
elbilsveckan
bilar-med-sladd
rss-technokratin
market-makers
skogsforum-podcast
natets-morka-sida
rss-elektrikerpodden
rss-en-ai-till-kaffet
har-vi-akt-till-mars-an
bli-saker-podden
rss-laddstationen-med-elbilen-i-sverige
dom-kallar-oss-krypto
developers-mer-an-bara-kod
hej-bruksbil
rss-snacka-om-ai
rss-upplyst-entreprenordirektor
rss-fabriken-2
rss-veckans-ai
rss-milpodden