Controller creating pods with enabled hostPID, hostIPC, hostNetwork and with privileged Docker
Docker privileged mode grants a Docker container root capabilities to all devices on the host system. hostPID when set to...
Blog
Function app environment variables expose secrets
Azure Functions is Azure's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Web app environment variables expose secrets
Azure Functions is Azure's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Controller creating containers that are running as root or have the option to run as root
When assessing which user the controller allows its containers to run as, there are 3 parameters: 1. RunAsUser - define...
Controller creating containers with the NET_RAW capability enabled
Linux Capabilities refer to the division of the privileges, which are traditionally associated with superuser, into distinct units which can...
EC2 Instance with secrets in UserData Attribute
Instance metadata can be used to access user data that was specified when launching the instance. For example, a parameter...
Azure Automation account variables expose secrets
Automation account allows you to automate your Azure management tasks and to orchestrate actions across external systems from right within...
Privileged Group – User Management
An IAM Group is a collection of IAM Users. You can use groups to specify permissions for a collection of...
Privileged Role – Assume Role
An IAM Role is an identity with permission policies that determine what the identity can do in AWS. A role...