Policy-patrol_IAM

Description

You'll assume the role of a vigilant security professional responsible for evaluating and enhancing IAM policies. Your objective is to identify potential security gaps across AWS accounts. kpmg-ctf2.s3.ap-south-1.amazonaws.com

Solution

• Open the given s3 bucket link, it gives an xml file listing all the files in the bucket.

• We can also list the bucket contents using the AWS cli: aws s3 ls s3://kpmg-ctf2 --no-sign-request

• Going through the files we find an interesting file named aws.json

• It contains the AWS Access Key ID and Secret Access Key for an IAM user: /resources/flash_cards/aws.json

• We can setup a profile using the AKID and Secret Access Key aws configure --profile KICTF

• Enter the Access Key ID and Secret Access Key (DONT FORGET TO CONFIGURE THE REGION!!!)

• We can now use this tool to enumerate the IAM policies for the profile: IAM Enumerate

• We get the flag in one of the policies with the name kpmg_flag

flag

• Flag: KPMG_CTF{d2570462521936fc5330823c43781fca}