Update aws-kms-enum.md

This commit is contained in:
Jaime Polop
2025-06-27 18:37:04 +02:00
committed by GitHub
parent f26eba3574
commit 4c5a2d0b51

View File

@@ -131,6 +131,11 @@ aws kms list-grants --key-id <id>
aws kms describe-key --key-id <id>
aws kms get-key-policy --key-id <id> --policy-name <name> # Default policy name is "default"
aws kms describe-custom-key-stores
# This script enumerates AWS KMS keys across all available regions.
for region in $(aws ec2 describe-regions --query "Regions[].RegionName" --output text); do
echo -e "\n### Region: $region ###"; aws kms list-keys --region $region --query "Keys[].KeyId" --output text | tr '\t' '\n';
done
```
### Privesc