Skip to content

Commit 357538d

Browse files
committed
fix docs
1 parent fc7fc3d commit 357538d

File tree

2 files changed

+2
-4
lines changed

2 files changed

+2
-4
lines changed

docs/attack-techniques/AWS/aws.impact.bedrock-invoke-model.md

+1-2
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,12 @@ Platform: AWS
1717
## Description
1818

1919

20-
Simulates an attacker enumerating Bedrock models and then invoking the Anthropic Claude 3 Sonnet (anthropic.claude-3-sonnet-20240229-v1:0) model to run inference using an arbitrary prompt. LLMjacking is an attack vector where attackers use stolen cloud credentials to run large language models, leading to unauthorized inference.
20+
Simulates an attacker enumerating Bedrock models and then invoking the Anthropic Claude 3 Sonnet (<code>anthropic.claude-3-sonnet-20240229-v1:0</code>) model to run inference using an arbitrary prompt. LLMjacking is an attack vector where attackers use stolen cloud credentials to run large language models, leading to unauthorized inference.
2121

2222
<span style="font-variant: small-caps;">Warm-up</span>: None.
2323

2424
<span style="font-variant: small-caps;">Detonation</span>:
2525

26-
- Enumerate foundation models that can be used in the current region using <code>ListFoundationModels</code>.
2726
- If Anthropic Claude 3 Sonnet is not enabled, attempt to enable it using <code>PutUseCaseForModelAccess</code>, <code>ListFoundationModelAgreementOffers</code>, <code>CreateFoundationModelAgreement</code>, <code>PutFoundationModelEntitlement</code>
2827
- Call <code>bedrock:InvokeModel</code> to run inference using the model.
2928

v2/internal/attacktechniques/aws/impact/bedrock-invoke-model/main.go

+1-2
Original file line numberDiff line numberDiff line change
@@ -43,13 +43,12 @@ func init() {
4343
ID: "aws.impact.bedrock-invoke-model",
4444
FriendlyName: "Invoke Bedrock Model",
4545
Description: `
46-
Simulates an attacker enumerating Bedrock models and then invoking the ` + BedrockModelFullName + ` (` + BedrockModelID + `) model to run inference using an arbitrary prompt. LLMjacking is an attack vector where attackers use stolen cloud credentials to run large language models, leading to unauthorized inference.
46+
Simulates an attacker enumerating Bedrock models and then invoking the ` + BedrockModelFullName + ` (<code>` + BedrockModelID + `</code>) model to run inference using an arbitrary prompt. LLMjacking is an attack vector where attackers use stolen cloud credentials to run large language models, leading to unauthorized inference.
4747
4848
Warm-up: None.
4949
5050
Detonation:
5151
52-
- Enumerate foundation models that can be used in the current region using <code>ListFoundationModels</code>.
5352
- If ` + BedrockModelFullName + ` is not enabled, attempt to enable it using <code>PutUseCaseForModelAccess</code>, <code>ListFoundationModelAgreementOffers</code>, <code>CreateFoundationModelAgreement</code>, <code>PutFoundationModelEntitlement</code>
5453
- Call <code>bedrock:InvokeModel</code> to run inference using the model.
5554

0 commit comments

Comments
 (0)