---
id: 8080
title: "Gaining AWS Console Access via API Keys"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/gaining-aws-console-access-via-api-keys/"
published_at: "2020-03-18T00:00:00Z"
tags: ["cloud", "cloud-security", "aws", "tooling", "pentest", "credentials", "federation"]
phying_url: "https://phying.com/item/8080"
lang: en
---

# Gaining AWS Console Access via API Keys

## Summary

Converts compromised AWS API keys, whether permanent AKIA or temporary ASIA credentials, into browser console access via the federation endpoint, easing recon compared with wrangling CLI syntax.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2020-03-18T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/gaining-aws-console-access-via-api-keys/
- **Phying News:** https://phying.com/item/8080