Pivoting Through AWS Organizations: Security Implications and Attack Pathways

Explore a technical conference talk that delves into AWS Organizations security, demonstrating how penetration testers can leverage organizational structures to expand their attack surface from a single compromised account to multiple accounts. Learn about AWS Organizations' core functionality, account creation exploitation, trusted access mechanisms, and delegated administration vulnerabilities that enable lateral movement across organizational boundaries. Discover recently implemented security features and their implications, while gaining hands-on knowledge of open-source tooling developed for organization enumeration within Pacu. Master both technical penetration testing techniques and broader security concepts relevant for security practitioners and business stakeholders managing AWS organizational structures.