AWS - SNS Persistence
SNS
For more information check:
AWS - SNS EnumPersistence
When creating a SNS topic you need to indicate with an IAM policy who has access to read and write. It's possible to indicate external accounts, ARN of roles, or even "*".
The following policy gives everyone in AWS access to read and write in the SNS topic called MySNS.fifo
:
Create Subscribers
To continue exfiltrating all the messages from all the topics and attacker could create subscribers for all the topics.
Note that if the topic is of type FIFO, only subscribers using the protocol SQS can be used.
Last updated