UpdateDevEndpoint

glue:UpdateDevEndpoint to push an SSH public key to a Glue development endpoint running a privileged role and get a shell.

1 நிமிட வாசிப்பு5 அக்., 2026 அன்று புதுப்பிக்கப்பட்டதுflorianamette1 பங்களிப்பாளர்
உங்கள் உதவியாளரிடம் கேளுங்கள் (MCP)GitHub இல் திருத்து

A Glue development endpoint is a long-lived instance that runs with a Glue service role. glue:UpdateDevEndpoint lets you add an SSH public key to an existing endpoint, then you SSH in and operate as the role, no PassRole required.

Add your key and connect#

bash
aws glue update-dev-endpoint --endpoint-name <endpoint> \
  --add-public-keys "$(cat ~/.ssh/id_ed25519.pub)"
# then SSH to the endpoint's public address as the glue user
ssh glue@<endpoint-address>
#   aws sts get-caller-identity   (runs as the Glue role)

Exploitation notes#

  • The endpoint must already exist; this is the update variant of the Glue PassRole creation path.
  • Glue service roles frequently carry broad S3 and Data Catalog access, so the shell is a strong data-access and pivot position.

Tools#

  • AWS CLI (glue update-dev-endpoint).
  • Pacu: Glue modules.

References#

முந்தையதுAssociateInstanceProfileஅடுத்தது UpdateFunctionCode