1. enumerate local environment variables
  • echo $AWS_EXECUTION_ENV
  1. local aws configuration and potential secrets
  • user@host:~ export | awk '/ACCESS|SECRET|REGION|TOKEN/'
  1. lambda functions permissions
  • aws sts get-caller-identity
  1. permissions of a listed bucket
  • aws s3api list-objects-v2 --bucket INSERTBUCKETNAMEHERE | grep 'Key' | head -n 3