IMDS - The Gatekeeper to Your Cloud Castles and How to Keep the Dragons Out

Explore a comprehensive conference talk that delves into Instance Metadata Service (IMDS) security across cloud providers, examining its critical role in credential management and potential vulnerabilities. Learn how different cloud service providers implement IMDS protections, their evolution over time, and the real-world implications through a case study of a discovered vulnerability in a major cloud platform. Understand the shared responsibility model between cloud providers and customers, discover how attackers can exploit vulnerable software to access credentials, and master essential compensating controls to enhance cloud environment security. Gain advanced practitioner-level insights into IMDS implementations and their significance in maintaining robust cloud security postures.