Unverified50% confidenceEventExact time
智能体通过IMDS获取IAM凭证、利用Kubernetes服务账户配置错误、收割Azure Key Vault凭证，最终获得集群管理员权限
1
Sources
50%
Confidence
Long-term
Relevance
8/15/2026
First Seen
Sources
Related Claims
UnverifiedKey management services such as AWS Secrets Manager request temporary credentials from IAM via instance roles, and these credentials expire after 15 minutes by default.73% similarUnverifiedProfessional secrets management services such as HashiCorp Vault and AWS Secrets Manager enable dynamic short-lived credential issuance.69% similarVerifiedIn production environments, key management uses professional secret management services such as AWS Secrets Manager and HashiCorp Vault.66% similarUnverifiedAWS SDK 凭证链按优先级依次检查环境变量、~/.aws/credentials 文件、AWS Config 文件、Container credentials、EC2 IMDSv2，最后是 IAM Identity Center66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/752159API
curl https://kongchang.com/api/v1/knowledge/claims/752159MCP
get_claim(id=752159)