Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Secrets and key management - AskJ1 Community
<main> <article class="userContent"> <h2 data-id="what-ssh-keys-exist-on-system">What SSH keys exist on system {}?</h2> <p>Find all SSH keys in an AWS account:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find aws_key_pair with tag.AccountName='{accountName}' </pre> <p>You can also use the abstract class:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find AccessKey with usage='ssh' and tag.AccountName='{accountName}' </pre> <p>Find key usage and return a graph:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find aws_key_pair that relates to Host return tree </pre> <p>Find key usage and return a table with specific properties:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find aws_key_pair as key that relates to Host as h return key.displayName, h.displayName, h.instanceId, h.region, h.classification, h.tag.AccountName </pre> <h2 data-id="what-ssh-keys-exist-on-system-without-link-to-employee">What SSH keys exist on system {} without link to employee?</h2> <p><em>The linkage will be mapped when we start processing cloudtrail events.</em></p> <h2 data-id="what-secrets-vault-kms-etc-can-a-service-access-and-what-is-that-service-able-to-do-with-them">What secrets (vault, kms, etc...) can a service access and what is that service able to do with them?</h2> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find aws_kms_key that uses * return tree </pre> </article> </main>
.png)