AWS - API Gateway Persistence

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks:

• If you want to see your company advertised in HackTricks or download HackTricks in PDF Check the SUBSCRIPTION PLANS!

• Get the official PEASS & HackTricks swag

• Discover The PEASS Family, our collection of exclusive NFTs

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share your hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

API Gateway

For more information go to:

pageAWS - API Gateway Enum

Resource Policy

Modify the resource policy of the API gateway(s) to grant yourself access to them

Modify Lambda Authorizers

Modify the code of lambda authorizers to grant yourself access to all the endpoints. Or just remove the use of the authorizer.

IAM Permissions

If a resource is using IAM authorizer you could give yourself access to it modifying IAM permissions. Or just remove the use of the authorizer.

API Keys

If API keys are used, you could leak them to maintain persistence or even create new ones. Or just remove the use of API keys.

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks:

• If you want to see your company advertised in HackTricks or download HackTricks in PDF Check the SUBSCRIPTION PLANS!

• Get the official PEASS & HackTricks swag

• Discover The PEASS Family, our collection of exclusive NFTs

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share your hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.