Michael McCabe
Michael McCabe is the president of Cloud Security Partners. Michael helps clients migrate their workloads to the cloud in a secure and managed way. He's worked with large financials during their cloud migrations and transformations. He focuses on creating secure and approachable solutions for his clients.
Sessions
06-10
15:00
45min
Infrastructure as Remote Code Execution: How to abuse Terraform to elevate access
Michael McCabe
This talk will focus on ways to abuse the use of Terraform to elevate privileges, expose data, and gain further footholds in environments from a developer's perspective. We'll cover the common uses of Terraform and how a malicious actor could abuse Terraform and even bypass security controls to execute unapproved code. This talk will include multiple demos of ways to exploit Terraform cloud.
Track 3 (Moody Rm 102)