Lambda - Data Exfiltration

Walkthrough summary

Lambda - Data Exfiltration TryHackMe walkthrough with 8 answered prompts and lab methodology notes.

Sample prompts covered

• What is the NotAction value in the policy for the coins bucket?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the Name of the VPC we need to target?
  Open the walkthrough page to inspect the full answer and command flow.
• Which Lambda function has the AWSLambda_FullAccess managed policy attached to it?
  Open the walkthrough page to inspect the full answer and command flow.
• Which Lambda function has the IAM permissions to access any S3 Object in any S3 Bucket in this account?
  Open the walkthrough page to inspect the full answer and command flow.
• Who gave the list-images function's author the vulnerable CLI command to run?
  Open the walkthrough page to inspect the full answer and command flow.