Compromising Terraform & AWS Atlantis Build Jobs

Double the demos with Ignacio Dominguez and Carlos Polop of HALBORN -- this time digging into misconfigurations with Infrastructure as Code with Terraform and AWS Atlantis as we've been exploring CI/CD and DevOps offensive security!

This video is released in partnership with HALBORN! You can learn more about security assessments and cloud testing HALBORN does at: https://jh.live/halborn

00:00 Preview
01:02 About Terraform
02:40 Hacking Terraform
07:46 Attack: getting AWS admin access
13:23 About Atlantis
14:56 Hacking Atlantis
19:47 Attack: getting …

access admin attack aws build cd and devops code devops hacking halborn infrastructure infrastructure as code jobs misconfigurations offensive offensive security preview security terraform