CloudHacker Noonabout 6 hours ago
Docker Layer Exposed Old AWS Key
7 min read
An outside auditor found an old AWS secret key baked into a Docker layer from eight months earlier during a SOC2 dry run. The key had been rotated and was no longer live. The discovery took roughly ninety seconds using docker history --no-trunc on a production image.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
_Kiattisak_Lamchan_Alamy.png%3Fquality%3D80%26disable%3Dupscale&w=160&q=80&output=webp&we)
