No More Blurring - Securely Auto Block AWS Account Info For Tutorial Screenshots and Videos

Search for a command to run...

No comments yet. Be the first to comment.
Why Least Privilege Security Engineering Is Frequently Skipped or Done Loosely In a previous life, I was on a team that reviewed the IAM policies specified by developers when they created new Cloud applications or required additional permissions for ...

AWS CloudShell joins the ranks of hostless shells for operating in your cloud environment. Cloud shells are a huge help to training and enablement scenarios because they remove the pain of fussy configuration of a user-owned endpoint - which can have...

This article is the third and final of a series. Part 1 justified that human-performed DevOps checklists are essentially source code, and according to GitOps principles, belong in Git just like any other code required for successfully managing a soft...

There are always those who feel checklists are an unnecessary waste of time because they think they can always remember the basics of the steps involved to complete a task. Many are also not aware of the huge, cross-discipline benefits that can come ...

Obscuring sensitive information like AWS account IDs in screenshots and videos is tedious and error-prone. Even with video editing tools that simplify the process, I still have to repeatedly add and remove blurring boxes as the view changes.
You know what I mean, it generally looks something like this when redacted:

Fortunately, there's a simple solution for hiding the AWS account information in screenshots and videos. Ad blockers that use filter lists like AdBlock Plus can be configured with a custom rule to automatically remove the account ID span. Here is the AdBlock formatted rule that will hide the information.
[Adblock Plus 2.0]
! Version:
! Title: CustomList
! Last modified:
! Expires:
! Homepage:
!
console.aws.amazon.com##span[data-testid="awsc-nav-account-menu-button"]
Note: Instead of trying to manually configure this file or a rule, see the section below "Direct Sourcing by URL"
So it will now display like this:

The custom ad blocker rule obscures AWS account IDs in screenshots, but still allows easy access to view them when necessary. The account information drop-down arrow remains visible and clicking it reveals the account number, your current IAM user and all the regular links that are normally on this menu.

If you are using either the AdBlock or AdBlock Plus extension, you will likely need to disable the built-in list "Acceptable Ads" as discussed in this AdBlocks Support Solution. When I did not disable this list, the AWS Account information would continue to be visible.
I generally use Vivaldi which supports AdBlocker rules natively. Since it does not depend on third-party browser extensions to remove the AWS Account data display, it does not open one up to additional security implications of third-party extensions that have page-level access to your AWS console. It also is not configured with the "Acceptable Ads" list.
Most ad blockers can be configured with an import URL. If you would like to import this rule and any improvements to it in the future, you can import from this URL: https://gitlab.com/missionimpossiblecode/adblock-for-tutorials/-/raw/main/adblockconfig.txt
Here are the instructions for configuring filter lists for AdBlock.