AWS - Control Tower Enum
Last updated
Last updated
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)
У підсумку, Control Tower - це сервіс, який дозволяє визначати політики для всіх ваших облікових записів у вашій організації. Тож замість управління кожним з них ви можете встановити політики з Control Tower, які будуть застосовані до них.
AWS Control Tower is a service provided by Amazon Web Services (AWS) that enables organizations to set up and govern a secure, compliant, multi-account environment in AWS.
AWS Control Tower provides a pre-defined set of best-practice blueprints that can be customized to meet specific organizational requirements. These blueprints include pre-configured AWS services and features, such as AWS Single Sign-On (SSO), AWS Config, AWS CloudTrail, and AWS Service Catalog.
With AWS Control Tower, administrators can quickly set up a multi-account environment that meets organizational requirements, such as security and compliance. The service provides a central dashboard to view and manage accounts and resources, and it also automates the provisioning of accounts, services, and policies.
In addition, AWS Control Tower provides guardrails, which are a set of pre-configured policies that ensure the environment remains compliant with organizational requirements. These policies can be customized to meet specific needs.
Overall, AWS Control Tower simplifies the process of setting up and managing a secure, compliant, multi-account environment in AWS, making it easier for organizations to focus on their core business objectives.
For enumerating controltower controls, you first need to have enumerated the org:
AWS - Organizations EnumControl Tower також може використовувати Account factory для виконання CloudFormation templates в рахунках та запуску сервісів (privesc, post-exploitation...) в цих рахунках
Вивчайте та практикуйте AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Вивчайте та практикуйте GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)
