An address the client no longer owns
The client’s asset list is from December. Compare it with today’s Elastic IP allocations and CloudTrail to find the address that was released and may now belong to someone else.
Briefing
The client sent an asset list exported in December for an external test of their AWS account. Cloud public addresses go back to the provider’s pool when released and can be reassigned to another customer within minutes.
You have read-only exports from this morning: aws ec2 describe-addresses and a CloudTrail extract. Only addresses still allocated to the client’s account are in scope.
pentest-ws · Scope checks
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.