Enumeration
AWSCLI Configuration
We can configure Profile using awscli
aws configure --profile McDuck

Getting Basic Information
First Thing you need to do after setting the credentials is that you need to see your details and information
aws sts get-caller-identity --profile user1
aws iam get-user

List Groups
aws --profile user4 iam list-groups-for-user --user-name r_waterhouse

List Policies
aws --profile user4 iam list-group-policies --group-name cg-developers

List Group Policy
aws --profile user4 iam get-group-policy --group-name cg-developers --policy-name developer_policy

S3 Buckets
List s3 Buckets
aws s3 ls --profile McDuck

Recursively Look at the S3 Buckets
We can recursively see the S3 Buckets
aws s3 ls s3://cg-keystore-s3-bucket-rce-webapp --recursive --profile McDuck

Download Files From S3 Buckets
aws s3 cp s3://cg-keystore-s3-bucket-rce-webapp/cloudgoat . --profile McDuck

Describe-Instances
aws ec2 describe-instances --profile McDuck

Describe DB Instances
aws rds describe-db-instances --region us-east-1

Last updated