Credential creation

Minting new credentials for an IAM principal you can write to: additional access keys and new or reset console login profiles.

Dakika 1 za kusomailisasishwa 7 Okt 2026

mchangiaji 1

Uliza msaidizi wako (MCP)Hariri kwenye GitHub

Maudhui haya yanaonyeshwa kwa english kwa sababu hayapatikani kwa kiswahili.

If you can create or reset credentials on a more privileged principal, you become that principal without touching its policies. Two primitives: programmatic access keys, and console login profiles.

Paths#

CreateAccessKey: mint a second set of long-term keys for a privileged user.
CreateLoginProfile: set a console password on a user that has none.
UpdateLoginProfile: reset the console password of a privileged user.

References#

Rhino Security Labs: AWS privilege escalation (credential paths)
BishopFox: iam-vulnerable
Pacu (Rhino Security Labs)
Hacking the Cloud: AWS