雲端 AI 基礎設施攻擊

# Example: Overprivileged AWS SageMaker role
{
    "Version": "2012-10-17",
    "Statement": [{
        "Effect": "Allow",
        "Action": [
            "s3:*",           # Too broad -- should scope to specific buckets
            "sagemaker:*",    # Too broad -- should limit to specific resources
            "ecr:*",          # Allows pulling any container image
            "logs:*"          # May expose other teams' logs
        ],
        "Resource": "*"       # No resource scoping
    }]
}

# Check for unauthenticated endpoint access
import requests
 
endpoints = [
    "https://runtime.sagemaker.us-east-1.amazonaws.com/endpoints/prod-model/invocations",
    "https://ml-workspace.azureml.net/score",
    "https://us-central1-aiplatform.googleapis.com/v1/projects/my-project/locations/us-central1/endpoints/12345:predict",
]
 
for endpoint in endpoints:
    resp = requests.post(endpoint, json={"inputs": "test"}, timeout=5)
    print(f"{endpoint}: {resp.status_code}")