AWS:
Vulnerability Discovery
Find EC2 SSRF flaws to steal IAM creds via metadata endpoint
AWS vulnerability discovery identifies misconfigurations and policy weaknesses that could lead to unauthorized access or data exposure, without exploiting them.
Overpermissive IAM policies with wildcard actions or resources are the most common finding. Public S3 buckets, unencrypted EBS volumes and RDS snapshots, security groups allowing unrestricted inbound access, and missing MFA on privileged accounts are all high-signal indicators. CloudTrail logging gaps and missing GuardDuty coverage reduce detection capability.
Automated scanners like ScoutSuite and Prowler flag these issues across the account. Manual policy review catches privilege escalation paths that automated tools miss.