CanExecuteCommand
Source can run OS-level commands on a host/container/managed runtime (agent, run-command, exec, session-pool exec). Notebook targets cover managed notebook instances (Vertex AI Workbench, SageMaker) whose kernels execute arbitrary code as the instance's runtime identity.
Identity
── CanExecuteCommand ──▸
VirtualMachine, Container, ContainerService, KubernetesWorkload, RemoteManagementService, AnalyticsService, Notebook, ApplicationPlatform, AutomationService
Source types
IdentityTarget types
States
ACTIVE
CONDITIONAL
POTENTIAL
BLOCKED
UNKNOWN
Derivation
| nature | explicit |
|---|
Per-cloud
| cloud | permissions / triggers | note |
|---|---|---|
| aws |
ssm:SendCommand ssm:StartSession ec2-instance-connect:SendSSHPublicKey
|
|
| gcp |
compute.instances.setMetadata (SSH keys) OS Login roles
|
|
| azure |
Microsoft.Compute/virtualMachines/runCommand/action VM run-command / RunPowerShellScript extension
|
Rules that emit CanExecuteCommand 32
Create a deployment with an attacker-controlled revision; hook scripts run as root on every EC2/on-prem instance in the deployment group, yielding fleet-wide command execution.
awsderived
awsderived
awsderived
ECS Exec runs OS commands inside a running container.
awsderived
A principal with Kubernetes cluster-admin RBAC (system:masters binding or equivalent ClusterRole: cluster-admin) can exec into any pod in any namespace via pods/exec. This gives OS-level code execution and access to the pod's mounted SA token / IRSA credential. Matches CanModifyConfiguration on the cluster (indicating cluster-admin access establishment).
awsderived
Inject an SSH public key into a running Glue development endpoint via glue:UpdateDevEndpoint, gaining OS-level command execution on the Spark cluster host.
awsderived
awsderived
opsworks:UpdateUserProfile overwrites an OpsWorks user's SSH public key; OpsWorks propagates it to all stack instances at the next configure event, giving SSH access.
awsderived
ssm:SendCommand delivers attacker-controlled commands to a managed instance, yielding OS-level execution as root/SYSTEM.
awsderived
ssm:StartSession opens an interactive WebSocket shell to a managed instance, bypassing firewall rules.
awsderived
azurederived
A cluster-admin kubeconfig (from listClusterAdminCredential) grants kubectl exec into any pod in the cluster.
azurederived
managedClusters/runCommand/action runs arbitrary kubectl/helm inside the cluster, bypassing network isolation; equivalent to cluster-wide kubectl exec.
azurederived
Azure Kubernetes Service RBAC Cluster Admin role (Azure RBAC mode) maps to k8s cluster-admin, granting kubectl exec on every pod.
azurederived
Submit a runbook job targeting a Hybrid Runbook Worker Group; the runbook runs as LOCAL SYSTEM (or a stored credential) on the designated VM/on-prem host.
azurederived
Submit a job/task whose commandLine runs on pool nodes.
azurederived
azurederived
azurederived
Executing code in a custom-container session pool runs attacker-supplied code in the sandbox; if the pool binds a reachable MI this is a CanExecuteAs primitive identical to the app exec path.
azurederived
Synapse Compute Operator role (or Synapse Administrator) allows submitting Spark batch jobs and interactive sessions via the Livy API, running attacker-supplied code on Spark workers.
azurederived
azurederived
azurederived
azurederived
gcpderived
dataproc.jobs.create on an existing cluster lets the principal submit arbitrary Spark/PySpark/Hive code that runs on cluster VMs -> RCE as the cluster SA.
gcpderived
SSH-key metadata (instance or project) yields interactive command exec.
gcpderived
gcpderived
container.clusters.getCredentials + cluster-admin ClusterRoleBinding (or system:masters group) => pods/exec create on all pods => CanExecuteCommand fan-out.
gcpderived
K8s RBAC pods/exec create (or ClusterRole containing it) on a namespace/cluster grants CanExecuteCommand on pods in scope - the direct exec path independent of GCP IAM.
gcpderived
A Kubernetes RBAC subject (user/group/SA) holding pods/exec create verb on a namespace can exec into any pod in that namespace.
awsexplicit
SSH access to a running compute instance when SSH is enabled and the principal controls the SSH private key.
azureexplicit
Principal holds notebooks.instances.use on a Workbench instance (explicit permission normalization).
gcpexplicit