Edge types
Filtered:
from Compute
to Identity
- 5 of 80.
Clear
Source can obtain an access/OIDC token for an identity (metadata endpoint, token mint).
credential
walkable
Recon: resource references another (connection targets, IaC). Aids collection, not traversal. Network sources (e.g., Route 53 DNS zones) reference alias targets like ELB/CloudFront/S3; dangling aliases are a legitimate structural relationship.
data
A workload (Compute or Messaging) runs under the target identity. Zero-cost link (a fact, not an action) enabling CanExecuteAs derivations. Includes orchestration workflows, logic apps, and event consumers running as a specified identity.
execution
walkable
high value
Target is reachable/abusable from the public internet - common attack entry point (incl. a queue/topic/API with a public/wildcard resource policy).
network
walkable
high value
Resource contains/leaks a credential usable for the target identity (env var, code, connstring, metadata, API key). Target can be a Credential, Identity, or Secret/APIKey node.
credential
walkable