Sudharshan Kumar

Senior Security Specialist

Bio

Sudharshan Kumar is a Senior Security Specialist at Secura focusing on Cloud, web applications and active directory security. Being a part of Secura’s cloud experts group, he has performed several pentests on AWS and Azure corporate environments wherein he has found multiple privilege escalation scenarios. He firmly believes in the motto: “For me personally, cloud security isn’t a worry. My data is such a mess that no one would find anything anyway”, or not.

Sessions

ACD226

Policy Perils: From Misconfigurations to Account Takeovers

Room: Zaal 10 | Time: 14:10 | Duration: 30

AWS IAM becomes complicated when dealing with permissions for resources spread across different policies, roles and accounts. This opens the door for dangerous mistakes that allow for privilege escalation. In this talk, we show you real-life cases on how innocent-looking permissions can lead to full AWS account takeovers, even hop to accounts that should be out of reach. The talk will include 2 case scenarios pertaining to privilege escalation through over-permissive policies and associated roles.

Sudharshan Kumar

Senior Security Specialist

Roy Stultiens

Senior Security Specialist