How to Deploy FLR Relay Proxy

Deprecated Feature The FLR Relay Proxy feature described in this article was deprecated in Veeam Plug-In for AWS 7. In deployments where the feature was enabled before upgrading to Veeam Plug-In for AWS 7, the FLR Relay tab will still appear in the options. However, for Veeam Plug-In for AWS 7...

How to Create Custom Worker Instance IAM Role

The Worker IAM role is used to launch worker instances for backup and restore using S3 repository...

Unauthorized Access

github.com/openshift/cluster-kube-apiserver-operator allows unauthorized access. Users with access to create pods also have the ability to schedule workloads on master nodes. Pods with permission to access the host network, running on master nodes, can retrieve security credentials for the master...

“The default account is not initialized” error is displayed when adding an IAM role to Veeam Plug-In for AWS

Challenge The Default Backup Restore IAM role is not created upon the Veeam Plug-In for AWS installation. Attempts to add IAM roles to Veeam Plug-In for AWS in the Add Account wizard fail with the error: The default account is not initialized Cause The backup server cannot access the required AWS...

How to Create Custom Backup Policy IAM Role

The Backup Policy IAM role is used to run the following backup operations: Enumerating of the resources.Taking EBS snapshots of selected EC2 instances volumes.Creating volumes from snapshots.Attaching...

How to Create Custom IAM Role to Perform Restores

How to Create Custom IAM Role to Perform Restores...

How to Create Custom IAM Role to Connect to the Repository

The backup service is using the IAM Role to generate temporary access keys to connect to the S3 bucket where backup data is stored Veeam Backup Object Repository...

CloudSploit Scans - AWS Security Scanning Checks

CloudSploit scans is an open-source project designed to allow detection of security risks in an AWS account. These scripts are designed to run against an AWS account and return a series of potential misconfigurations and security risks. Installation Ensure that NodeJS is installed. If not, instal...

Scout2 - Security Auditing Tool For AWS Environments

Scout2 is a security tool that lets AWS administrators assess their environment's security posture. Using the AWS API, Scout2 gathers configuration data for manual inspection and highlights high-risk areas automatically. Rather than pouring through dozens of pages on the web, Scout2 supplies a...

Amazon Linux AMI : cloud-init (ALAS-2016-763)

It was discovered that cloud-init in the Amazon Linux AMI wrote IAM role credentials from the instance metadata service to files readable by the root user in /var/lib/cloud. An application with root privileges, a container with access to the relevant files, or a root user of an AMI derived from a...

Important: cloud-init

Issue Overview: It was discovered that cloud-init in the Amazon Linux AMI wrote IAM role credentials from the instance metadata service to files readable by the root user in /var/lib/cloud. An application with root privileges, a container with access to the relevant files, or a root user of an AM...

CVE-2015-6861

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...

CVE-2015-6861

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...

PT-2016-3727

Name of the Vulnerable Software and Affected Versions HPE Helion Eucalyptus versions 3.4.0 through 4.2.0 Description The issue allows remote authenticated users to bypass an intended permission requirement, specifically the AssumeRole permission, and assume an IAM role. This is achieved by...

CVE-2015-6861: Undefined Security Weakness

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...