AWS tokens

[shortstack]

Hi,

Attempting to use the AWS keys

I have canarytokens running in Docker on Ubuntu 16.04, sitting behind an ELB, 443/HTTPS pointing to 80/HTTP/nginx.

All of the other tokens I've tried are working fine.

[default]
aws_access_key_id = $GENERATEDACCESSKEYID
aws_secret_access_key = $GENERATEDACCESSKEY
region = us-east-2
output = json

I put the above in ~/.aws/credentials

Ran aws configure, picked it up no problem

Ran the following:

aws iam create-user --user-name TestMePlease
aws s3 ls
aws ec2 describe-instances

And probably a few others, have waited about an hour, no alert and nothing in the logs on my end.

I know this piece is hosted on your lambda. I tried the version on canarytokens.org and got an alert about 20 minutes later (which you mentioned on your blog).

Wondering where the disconnect is. Thank you.