An instance role creates an admin user

Follow IAM calls in CloudTrail to show that an EC2 instance role, used from outside AWS, created a new admin user with a key and a console password.

Terminal mission
Advanced
4 objectives
0 of 4 solved

Briefing

Instance role credentials are temporary and meant to be used from the instance. If they are used from an address outside AWS, they were stolen, usually through the instance metadata service.

The session name of an EC2 role is the instance ID. The same role from inside the VPC appears with a 10.x address.

analyst@cloud-shell

cloud-shell · Cloud logs

Type help for the command list and objectives for your tasks. Everything runs in this browser.

analyst@cloud-shell:~$

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.