How to Escape Clusters in a Managed Kubernetes Cluster?

<p>Not Escaping Containers but escaping Clusters - Managed Kubernetes distributions such as Amazon EKS, Google Kubernetes Engine (GKE) and Azure Kubernetes Service (AKS) attack vectors can allow you to reach the underlying AWS Account etc. In conversation with Christophe Tafani-Dereeper &amp; Nick Frichette, from Datadog on how this is possible in Amazon EKS and achieving potentially the same in GKE &amp; AKS too.</p> <p><br></p> <p><a href="https://www.sagetap.io/" target="_blank" rel="noopener noreferer">Thank you to our episode sponsor Sagetap</a></p> <p><br></p> <p><strong>Guest Socials: Nick&#39;s and Christophe&#39;s Linkedin </strong>(⁠⁠<a href="https://www.linkedin.com/in/mrsec/">⁠⁠⁠⁠⁠</a>⁠⁠<a href="https://www.linkedin.com/in/nick-frichette/" target="_blank" rel="noopener noreferer">Nick Frichette</a> + <a href="https://www.linkedin.com/in/christophetafanidereeper/" target="_blank" rel="noopener noreferer">Christophe Tafani-Dereeper</a>)</p> <p><strong>Podcast Twitter </strong>- <a href="https://twitter.com/cloudsecpod">⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠<strong>@CloudSecPod</strong>⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠</a><strong> </strong><a href="https://twitter.com/CloudSecureNews">⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠</a></p> <p><strong>If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:</strong></p> <p>- ⁠⁠⁠⁠<a href="https://www.cloudsecuritynewsletter.com/">⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠<strong>Cloud Security Newsletter </strong>⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠</a></p> <p><strong>- </strong><a href="https://www.cloudsecuritybootcamp.com/">⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠<strong>Cloud Security BootCamp</strong></a> Questions asked: (00:00) Introduction </p> <p>(04:11) A bit about Christophe</p> <p>(04:37) A bit about Nick</p> <p>(05:03) What is managed Kubernetes?</p> <p>(06:26) Security of managed Kubernetes </p> <p>(09:02) Comparison between different managed Kubernetes </p> <p>(10:41) Service accounts and managed Kubernetes</p> <p>(14:22) What is container escape?</p> <p>(18:20) IMDSv2 for EKS</p> <p>(19:51) IMDS