The GCP metadata API; security considerations, vulnerabilities, and remediations

No ratings

Presented at BSidesSanFrancisco 2020 by

Dylan Donovan

Some folks know about the AWS metadata API and its security implications. Here I'll talk about the GCP metadata API and its security implications. GCP has extra protections, but a lot more at stake. I'll cover ways to attack and defend the GCP metadata API, and the risk it brings to your org.