Skip to content

Commit 9bbc502

Browse files
authored
Update aws-kms-enum.md
1 parent 4dac0aa commit 9bbc502

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

src/pentesting-cloud/aws-security/aws-services/aws-kms-enum.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -131,6 +131,11 @@ aws kms list-grants --key-id <id>
131131
aws kms describe-key --key-id <id>
132132
aws kms get-key-policy --key-id <id> --policy-name <name> # Default policy name is "default"
133133
aws kms describe-custom-key-stores
134+
135+
# This script enumerates AWS KMS keys across all available regions.
136+
for region in $(aws ec2 describe-regions --query "Regions[].RegionName" --output text); do
137+
echo -e "\n### Region: $region ###"; aws kms list-keys --region $region --query "Keys[].KeyId" --output text | tr '\t' '\n';
138+
done
134139
```
135140

136141
### Privesc

0 commit comments

Comments
 (0)