whoAMI: A cloud image name confusion attack

securitylabs.datadoghq.comsite

Dependency Confusion using AWS AMIs.

from

CI/CD Attacks

added

2026-10-10

likes

0

similar

1. ▲
   CloudQuarry: Digging for secrets in public AMIs securitycafe.ro

   site category #cicd-attacks link ↗

   Researchers found 500GB of credentials, private repos, and keys in public AWS AMIs, impacting various industries.

   
2. ▲
   Beyond S3: Exposed Resources on AWS duo.com

   site category #cicd-attacks link ↗

   Public EBS, RDS, AMI and Elasticsearch clusters exposed to the internet.

   
3. ▲
   amediamanager github.com

   tool category #aws link ↗
   
4. ▲
   AWS Targeted by a Package Backfill Attack mend.io

   site category #cicd-attacks link ↗

   Scan commit history for internal packages to execute dependency confusion.

   
5. ▲
   Identity and Access Management (IAM) aws.amazon.com

   site category #aws link ↗
6. ▲
   awscli-aliases :fire::fire: github.com

   tool category #aws link ↗
   

CI/CD Attacks › Techniques > Initial Code Execution: “Dependency Confusion using AWS AMIs.”