Chapter 6: Setting Up and Pentesting AWS Aurora RDS
AWS Aurora provides SQL-like database functionality to AWS accounts with simplicity. Focused around using PostgreSQL and MySQL, such as querying, Aurora makes interacting with high-performance storage systems easy for the user. The side effects can have a deadly cost, however, and can lead to data leaks if not adequately secured. This chapter is going to discuss the ins and outs of what Aurora has to offer, and also take a look at the dangers of SQL injection (SQLi) – a malicious attack against websites that host services such as MySQL. We will also discuss mitigation and preventions of denial of service (DoS) and distributed denial of service (DDoS).
In this chapter, we'll cover the following topics:
- Understanding and setting up the Aurora RDS
- White box/functional pentesting Aurora
- Setting up a lab for SQLi
- Fun with SQLi
- Avoiding DDoS
