From e1c2206db3f19ade2b1d6049600419b0c742cf60 Mon Sep 17 00:00:00 2001 From: Jason H <93341957+kihakuni@users.noreply.github.com> Date: Tue, 22 Feb 2022 13:57:19 -0500 Subject: [PATCH] Update README.md Recommending language change associated with IMDSv1 per AWS CISO guidance. --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index a7dfce6c..0673e17d 100644 --- a/README.md +++ b/README.md @@ -86,10 +86,10 @@ The following permissions are needed within AWS IAM for CloudSaga to run: ## Specific Scenario Details ``` IMDS Reveal Scenario: -This scenario is based on the attack vector provided by IMDS version 1. -EC2 instances using IMDS version 1 are vulnerable to server side request -forgery (SSRF) attacks, and can be used as a pivot point for privilege -escalation within AWS. +This scenario is based on a server-side request forgery attack. +EC2 instances using IMDS version 1 are more likely to be subject to this +kind of software flaw, and if EC2 Role credentials are present, those +credentials can be used in AWS. ``` ``` Bitcoin Mining Scenario: