AWS IAM Enumeration

Walkthrough summary

AWS IAM Enumeration TryHackMe walkthrough with 7 answered prompts and lab methodology notes.

Sample prompts covered

• Can you get information about an AWS account, including its IAM principals - without authenticating?
  Open the walkthrough page to inspect the full answer and command flow.
• If an IAM Principal does not exist, what does an attempt to update the resource-based policy to include the "Principal" return?
  Open the walkthrough page to inspect the full answer and command flow.
• What is John's username?
  Open the walkthrough page to inspect the full answer and command flow.
• What is Adam's last name?
  Open the walkthrough page to inspect the full answer and command flow.
• What type of S3 policy allows you to enumerate root user email addresses?
  Open the walkthrough page to inspect the full answer and command flow.