Dangerous
aws ec2 authorize-security-group-ingress --group-id sg-0a1b2c3d --protocol tcp --port 22 --cidr 0.0.0.0/0cross-platform · bash · Expert
Opens SSH to the entire internet on a security group. It is a single well-formed API call with no shell syntax at all; the danger is entirely in reading 0.0.0.0/0 as every source address rather than as a placeholder.
Signals to notice
- Administrative port exposed to 0.0.0.0/0
- No source address restriction at all
- Change takes effect immediately across the group
Think you can spot these under time pressure?
Start TrainingMore Cloud
aws iam attach-user-policy --user-name svc-deploy --policy-arn arn:aws:iam::aws:policy/AdministratorAccessIntermediateterraform plan -out=tfplanExpertaz account show --query id -o tsvExpertaws iam attach-role-policy --role-name build-runner --policy-arn arn:aws:iam::aws:policy/AdministratorAccessAdvancedaws iam put-role-policy --role-name build-runner --policy-name artifacts-write --policy-document file://./policy/artifacts-write.jsonIntermediateterraform apply -auto-approveExpert