Learn how to find the AWS Account ID of any S3 bucket using a technique that involves applying an IAM policy to the request, inferring whether the policy permits the request, and applying a wildcard match on the 's3:ResourceAccount' condition key. This technique can be used to uncover the Account ID incrementally, reducing the search space from trillions to hundreds.

9m read timeFrom tracebit.com
Post cover image
Table of contents
S3 Bucket to AWS Account IDHow exactly does this work?A solutionStep-by-stepResultsMaking it fasterRemarksAcknowledgments

Sort: