---
id: 7129
title: "Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/defeating-kubernetes-privilege-escalation-a-cloud-detection-response-case-study"
published_at: "2024-08-21T16:00:00Z"
tags: ["cloud", "aws", "incident-response", "kubernetes", "privilege-escalation", "eks", "cloud-detection"]
phying_url: "https://phying.com/item/7129"
lang: en
---

# Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study

## Summary

A case study of an attacker escalating from a Kubernetes cluster toward the AWS control plane, and how baseline-aware heuristics—an EC2 role querying resources from an odd IP—detected it early.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2024-08-21T16:00:00Z
- **Original:** https://www.wiz.io/blog/defeating-kubernetes-privilege-escalation-a-cloud-detection-response-case-study
- **Phying News:** https://phying.com/item/7129