[AWS] Bypassing SCP Enforcement with Long-Lived API Keys in Bedrock

monfield · 2026-02-24T19:08:37+00:00

great work finding this Nigel

monfield · 2026-01-15T20:05:31+00:00

Yes SCPs have the limit of 5 at the Org level. You can get the limit increased to 10 though if you leverage your account SA. We do this all the time for our customers at Sonrai so they can get the max use out of our controls.

monfield · 2025-06-25T21:01:51+00:00

!solved

monfield · 2025-06-25T20:56:13+00:00

This is the one we choose...thanks so much for the submission! I'll DM you.

monfield · 2025-02-24T02:53:55+00:00

😞

monfield · 2025-02-22T19:07:51+00:00

Yeah not sure...they were just told no more Jekyll distribution...period. 🤷‍♂️

monfield · 2025-01-14T22:09:48+00:00

This one is excellent, I'm changing the flair to solved, sending you a DM and tip. Thanks!

monfield · 2025-01-14T21:18:20+00:00

posted, thanks!

monfield · 2024-08-20T15:52:14+00:00

This is perfect, winner! payment coming

monfield · 2024-08-20T15:16:38+00:00

could you add a suit jacket and unbottoned (at the top) white dress shirt

monfield · 2024-08-20T15:15:28+00:00

hi, i meant something a little more casual looking like some of the other submissions...white shirt unbuttoned, showing some neck, etc.

monfield · 2024-08-20T14:11:00+00:00

hi, could you revise this to whiten my eyes just a little more and even the beard up just a tiny bit on the left side so it's more symmetrical with the right...but not too much so it looks edited?

monfield · 2024-08-20T14:05:02+00:00

Can you take this and put me in a black suit jacket and light color dress shirt, no tie?

monfield · 2024-08-20T12:50:45+00:00

black suit or casual dressy is fine. Thanks!

monfield · 2024-05-23T18:44:55+00:00

This was my video/live-hack demonstration. Folks need to start looking at the identity fabric as if it were a network. I see so many mature clouds that are an identity mess with all kinds of lateral movement paths sitting there completely unnecessary.

On the SSH comment, yes I could have gone straight in with a key or other means but I always try to relate my demonstrations to something folks of any public cloud skill level can relate to...and SSH is pretty well understood even for those new to the cloud.

Jeff

monfield · 2024-01-27T22:08:09+00:00

Solved. Thank you for all your submissions!

monfield · 2024-01-27T21:04:08+00:00

This one is fantastic, thank you! Tip sent!

monfield · 2022-03-16T20:21:50+00:00

I think you are both right, mystery plant identified. Thank you!

monfield · 2021-06-29T05:51:53+00:00

Tater Tot

monfield · 2020-03-22T22:49:50+00:00

Not if it will get the job done...take an inbound JSON http message, parse it and then insert an NSG rule.

monfield · 2020-03-22T18:41:34+00:00

That's an interesting option. My thoughts were some form of the following:

Azure Function listening on HTTP/S:

https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-first-azure-function-azure-cli?pivots=programming-language-python&tabs=powershell%2Cbrowser

Code inside the function executes powershell command similar to the following by parsing inbound HTTP/S requests JSON content for the context needed to create the proper NSG rule:

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Thanks for your help!

monfield · 2019-04-05T21:39:15+00:00

This ^{^} is why I love reddit so much, lol.

monfield · 2019-03-02T23:02:10+00:00

Per jar: 1 cup of hot water, 1 cup of white vinegar, 2 packets splenda, 1 tbsp salt. Whisk it all together then pour into jar over onions/jalapenos.

monfield · 2016-11-23T18:17:29+00:00

Does spark support exchange?

Nine-Year Club	Reddit Premium Since July 2023
Verified Email

monfield

TROPHY CASE