You're reading from AWS Penetration Testing Beginner's guide to hacking AWS with tools such as Kali Linux, Metasploit, and Nmap

Product type Paperback

Published in Dec 2020

Publisher Packt

ISBN-13 9781839216923

Length 330 pages

Edition 1st Edition

Languages

Tools

AWS

Concepts

Cloud Security

Author (1):

Jonathan Helmus

View More author details

Table of Contents (17) Chapters

Preface

1. Section 1: Setting Up AWS and Pentesting Environments

2. Chapter 1: Building Your AWS Environment FREE CHAPTER

3. Chapter 2: Pentesting and Ethical Hacking

4. Section 2: Pentesting the Cloud – Exploiting AWS

5. Chapter 3: Exploring Pentesting and AWS

6. Chapter 4: Exploiting S3 Buckets

7. Chapter 5: Understanding Vulnerable RDS Services

8. Chapter 6: Setting Up and Pentesting AWS Aurora RDS

9. Chapter 7: Assessing and Pentesting Lambda Services

10. Chapter 8: Assessing AWS API Gateway

11. Chapter 9: Real-Life Pentesting with Metasploit and More!

12. Section 3: Lessons Learned – Report Writing, Staying within Scope, and Continued Learning

13. Chapter 10: Pentesting Best Practices

14. Chapter 11: Staying Out of Trouble

15. Chapter 12: Other Projects with AWS

16. Other Books You May Enjoy

Leave a review - let other readers know what you think

Chapter 8: Assessing AWS API Gateway

AWS API Gateway acts as a gateway to applications that can host various types of data. The data they host varies; however, what does not is the fact the some of the data may be considered attractive to unauthorized personnel – such as the locations of S3 buckets or an overly permissive header. This chapter will discuss what AWS API Gateway is, and how you can learn to inspect API calls and manipulate API calls with open source tools.

Understanding how AWS APIs work will allow us to grow our mindset outside of the Linux Terminal and into the browser and understand the basics of web services and how to interact with them. While going through this chapter, remember that quite a few of the techniques in it can also assess all web applications within AWS. This chapter aims to have you obtain a thorough understanding of AWS APIs and how to evaluate web applications by manipulating API calls.

In this chapter, we'll cover the following...