Containing Compromised EC2 Credentials Without (Hopefully) Breaking Things

Originally published by FireMon. Written by Rich Mogull, SVP of Cloud Security, FireMon. TL;DR: There are multiple techniques for containing compromised instance credentials. The easy ones are the most likely to break things, but there are creative options to lock out attackers without breaking applications.Over the past few years we’ve seen some major advances by Amazon to help reduce the risks that an attacker can steal and abuse credentials assigned to AWS instances. Okay, sure, a lot of t...

abuse amazon applications attackers aws cloud cloud security compromised credentials ec2 firemon instance lock major options risks security steal techniques things