AWS ACCESS KEYS HACKED

AWS ACCESS KEYS HACKED

Amin Ahmed Khan Amin Ahmed Khan

Amin Ahmed Khan

Data and AI Solutions Architect @ Platformance.io | Generative AI | Data Engineering | AWS

发布日期: 2016年10月5日
+ 关注


AWS BILLING ALERT

To All developers and sys ops


Everyone kindly be very careful using your aws account. One of my clients aws account just got hacked. it was just an access key that got compromised.

He got a bill for $6,466.09 for the last month. Kindly be very careful


1) delete root account access keys

2) enable MFA for all accounts

3) rotate Keys

4) Setup aws billing alerts

5) create IAM user with only specific rights in use

6) Create strong password for all accounts



These links will help you


https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/free-tier-alarms.html


https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html


https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html


Kindly share


要查看或添加评论，请登录

Amin Ahmed Khan的更多文章

  • Hiring Front End Developer
    2016年9月22日

    Hiring Front End Developer

    Position: Front End Developer Vacancies: 3 Location: Karachi Company: Sudofy Office # 207 2nd Floor, Kings Trade Center…

  • Mean Stack Developer Required
    2016年8月27日

    Mean Stack Developer Required

    Get on board! We are looking for an experienced MEAN Stack Developer. Send your resume at hr@sudofy.

  • Looking for Business Developer!
    2016年4月7日

    Looking for Business Developer!

    Sudofy is an application development company dedicated to serve businesses with sleek and efficient software products…

社区洞察

其他会员也浏览了