The many ways to obtain credentials in AWS
Summary
A deep dive into how AWS applications obtain IAM credentials—SDK provider chain, environment variables, credentials files, IMDS/IMDSv2, and container endpoints—plus what defenders should watch for.
- Published
- Collected
--- id: 7075 title: "The many ways to obtain credentials in AWS" source_domain: wiz.io source_url: "https://www.wiz.io/blog/the-many-ways-to-obtain-credentials-in-aws" published_at: "2024-12-20T13:00:00Z" tags: ["cloud", "cloud-security", "aws", "detection", "iam", "credentials", "imds"] phying_url: "https://phying.com/item/7075" lang: en --- # The many ways to obtain credentials in AWS ## Summary A deep dive into how AWS applications obtain IAM credentials—SDK provider chain, environment variables, credentials files, IMDS/IMDSv2, and container endpoints—plus what defenders should watch for. ## Intelligence Metadata - **Sources:** wiz.io - **Published:** 2024-12-20T13:00:00Z - **Original:** https://www.wiz.io/blog/the-many-ways-to-obtain-credentials-in-aws - **Phying News:** https://phying.com/item/7075