7156">I covered user-specific secrets here:</p><div id="744d" class="link-block">
<a href="https://readmedium.com/create-a-per-user-secret-in-secrets-manager-part-1-bb97b66e2a2d">
<div>
<div>
<h2>User-Specific Secrets on AWS: IAM Policies</h2>
<div><h3>ACM.82 IAM Policies to allow users to describe their own secrets</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*PcniDpBJq2db0jbdryc_Nw.png)"></div>
</div>
</div>
</a>
</div><h2 id="aada">Create the user-specific Secret to store the automation credentials</h2><p id="a515">Next I create <b>SandboxDevAutomationSecret</b> in Secrets Manager, encrypted with my <b>Sandbox KMS key</b>.</p><figure id="e15e"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*DQonCyF8UzPnZZoiGOKD9w.png"><figcaption></figcaption></figure><figure id="f7b3"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*zITxEtD__wFDwpPrBpqv4w.png"><figcaption></figcaption></figure><h2 id="2e63">Create a user-specific EC2 instance role for the SandboxDev user</h2><p id="3417">Next I create an EC2 instance role that the developer is allowed to pass to EC2 instances named <b>SandboxDevEC2Role</b>.</p><figure id="44ef"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*__fohZeTWjwdYrS__B4imQ.png"><figcaption></figcaption></figure><p id="eee9">The role will have a prefix with the username:</p><figure id="7afa"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*7dKW5KiQMivtKqjgzA_1Gw.png"><figcaption></figcaption></figure><p id="a338">This role is granted access to:</p><ul><li>Read the<b> SandboxDevSecret.</b></li><li>Pull containers from the <b>sandbox Elastic Container Repository.</b></li><li>Use the <b>sandbox KMS key </b>to access decrypt the secret and the container in the repository</li></ul><h2 id="df90">Create the Automation user</h2><p id="b752">Create the <b>SandboxDevAutomation</b> user. Do not give this user console access.</p><figure id="ddeb"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*QWVvQMA9aDCtmiVxSR61iw.png"><figcaption></figcaption></figure><p id="c19e">Remember that I already have a role (<b>CloneGitHubtoCodeCommitRole</b>) used by my batch job from prior posts. Create a policy that allows the SandboxDevAutomation user to use STS to assume that role.</p><p id="559f">The <b>SandboxDev</b> user needs permission to change the <b>credentials</b> <b>and</b> MFA device of the <b>SandboxDevAutomation</b> user.</p><h2 id="0f53">Edit the batch job role trust policy to allow the SandboxDevAutomation role to assume it</h2><p id="7f1d">We need to modify the trust policy to allow the <b>SandboxDevAutomation</b> <b>user</b> to assume the <b>CloneGitHubtoCodeCommitRole</b> role with MFA.</p><figure id="6ad1"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*xAHGslW3SSbv6c5NO8mhzg.png"><figcaption></figcaption></figure><p id="7ad0">Edit the trust policy:</p><figure id="cfaf"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*Vna71G_F2e-8Vdtw4yBwFw.png"><figcaption></figcaption></figure><p id="6a5a">Change the user to SandboxDev:</p><figure id="f788"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*vpSqEqjFa_qg59v_dnPCzQ.png"><figcaption></figcaption></figure><h2 id="49b3">Add permissions to KMS Key Resource Policy</h2><p id="8cf1">Next I need to allow the <b>SandboxDev</b> user to encrypt and decrypt and the <b>SanboxDevEC2Role</b> to decrypt with the <b>sandbox KMS Key.</b> I edit my automation to add those two roles to the encrypt and decrypt users.</p><figure id="380f"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*UkzCt10p0iqCR4OpMs6uhQ.png"><figcaption></figcaption></figure><h2 id="d015">Login as SandboxDev</h2><p id="725d">Log into the AWS Console with the SandboxDev user. If you’ve been following along, you have an account with a prefix specific to your organization and -Dev at the end if you used my deployment scripts.</p><figure id="13d5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*5L-3C9ORVXOWv6KRdCkBLg.png"><figcaption></figcaption></figure><h2 id="d260">Add MFA devices</h2><p id="5cca">Add a Hardware MFA device to the SandboxDev User.</p><figure id="21f0"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*8s8rTuyWOsLAQUEqfwTtOQ.png"><figcaption></figcaption></figure><p id="c0e6">Add a Virtual MFA device to the SandboxDevAutomation User.</p><p id="5cec">I explain why I do not use a Yubikey to generate MFA codes here:</p><div id="1308" class="link-block">
<a href="https://readmedium.com/the-yubikey-cli-and-aws-mfa-50e6be0698a7">
<div>
<div>
<h2>The Yubikey CLI and AWS MFA</h2>
<div><h3>ACM.11 Considering the attack surface and MFA choices for our Security Batch Jobs</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*SFAKbcK__GlbJbJJJVXK9w.png)"></div>
</div>
</div>
</a>
</div><figure id="5893"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*iFl4DTQNuplt-SGONHpNYw.png"><figcaption></figcaption></figure><h2 id="d7df">Create automation credentials</h2><p id="b9e4">Create an <b>Access key</b> for the <b>SandboxDevAutomation</b> user.</p><figure id="7f1e"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*KoVfxp-aJvzBiacPyFeMlA.png"><figcaption></figcap
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="530b"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:
❤️ Sign Up my Medium Email List
❤️ Twitter: <span class="hljs-meta">@teriradichel</span>
❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span>
❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab</pre></div><figure id="eecf"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>
Love bombing can make a person feel like crud, but not at first. The initial reaction of love bombing within an undetected narcissistic relationship can equate to a positive interaction — until it’s recognized, and the underbelly is exposed as to what is really occurring beneath the seams.
In this article, we are going to open the gates on why love bombing is effective at first, why it’s hard to detect, and what is really transpiring when a love bomb happens.
Let’s go.
WHAT IS LOVE-BOMBING?
Love-bombing is the use of insincere words to flatter another. It’s the first cycle in the cycle of abuse followed by the Devalue and Discard. The narcissist often reverts to using this tactic in various statuses/stages of the relationship.
A narcissist will revert to love bombing to lure in their target initially and is often used throughout the relationship if tactics are exposed to distract the victim and to shift the focus of a conversation.
Too, the narcissist receives supply from the love bomb which is attention and a reaction from their target — whether it’s good attention or bad.
Note: In this article feel free to use the words target or victim interchangeably. There is a time when the victim/target is such; but when they start to see the tactics play out and make changes, they move into a survivor.
THE DELIVERY OF THE LOVE BOMB
The narcissist often has a keen delivery, but every narcissist’s style of delivery is not the same. Love bombing may be spoken lightheartedly by the narcissist giving the impression it is without merit yet, the words spoken are ‘compliments’ and are intended to carry weight, for a time. Right off the bat, it’s confusing and yet deliberate.
The narcissist may have chosen to have the impression they spoke frivolously, and it may have been because it was just mere words to win over the attention from the other party.
Without getting into the delivery of the love bomb in too much detail, know that the delivery of it is manipulative as well as the actual words spoken. The love bomb, while it sounds good with the naked eye, it’s full of flattery, is insincere, and is surface level,
Now, while the love bomb may have been delivered in an obscure manner, it’s also the intention behind it, which is detrimental to our mental health that often goes overlooked. Let’s take a look at why the love bomb is effective, at first.
WHY LOVE BOMBING IS EFFECTIVE AT FIRST
The Love Bomb may be effective in a relationship with a narcissist because the victim may think: they care, they care about me, they took the time to notice me, they listen to me, they hear me, I matter, and that is exactly what the narcissist wants. It’s false validation because the love bomb is not intended to validate it does just the opposite (more on this below).
The target receives the love bomb with open arms, at first. The narcissist will feed their target with the love bomb, but they have ulterior motives connected to it, which we will explore. It goes deep down the rabbit hole regarding the emotional ramification from being exposed to it for a prolonged period of time.
After a while with time and repetition, something seems a bit off by the love bomb, and slowly the muddy waters start to clear. Deep down the victim feels something is not right but it can take a long while to detect.
When someone who is close points out something ‘positive’ the target may absorb it before realizing it’s not a genuine compliment. So, the love bomb is accepted, and it feels good for a time, but it goes deeper than surface-level for the recipient. Why?
The narcissist’s love bomb may fill the emotional tank for a time; however, it’s not with fresh water. Next, let’s go in deep and pull back the layers, with what is really going on when the love bomb occurs over time with repetition in a narcissistic relationship or family environment.
WHAT IS REALLY TRANSPIRING WITH LOVE BOMBING
Put your seatbelt on for this section because we are about to uncover a topic that is often unaddressed when it comes to love bombing. We address it because it’s important for this information to be covered, so we can detect the dark side of what is really going on in a narcissistic relationship, and then to see why going no contact is stressed within this community. Ready?
Love bombing is cruel, not just because it’s false flattery, but because it’s emotionally going below the belt. And not just because it’s insincere, and with intent to take, but it is malicious. It’s a deliberate attempt to crush someone under the guise of embellishment.
It’s lying-in disguise. It’s taking away before adding. It’s an insult that attacks the intelligence of another with the hopes it goes unnoticed.
It’s disingenuous. It is not valuing another person. It sets the stage for cognitive dissonance (more on this in another article).
It’s taking the other person for granted. It’s positioning deception as an acceptable method of operation within the relationship.
It is setting the tone for the victim to believe the narcissist, which provides a baseline for gaslighting. If love bombing is allowed and accepted, the victim is trained (groomed) to also accept gaslighting and other forms of manipulation.
It’s setting the tone that the narcissist is the authority figure. The narcissist is setting the stage that it’s their opinion that matters and matters more — and when one person’s opinion matters more, it is indicative that another’s opinion matters less.
So, the relationship is being built on uneven terrain. The narcissist is dishing out the love bomb (false compliments) when they deliberately choose to do so. Too, it’s by the narcissist’s standards that a ‘compliment’ is given, or not given.
The target wants to hear the words (until they gain clarity), so they perform and keep on performing, though the narcissist will at times withhold the love bomb, only to cause confusion for the target.
What was ‘good enough’ for recognition (love bombing) after time not only is no longer recognized by the narcissist, but it requires more energy from the target to meet a level of being recognized. The victim works harder, all while internalizing they must be doing something wrong, and this is where doubt starts to creep in.
Love bombing is teaching the victim they must continue to do the things that were ‘praised’ so they will continue to receive the accolades by the narcissist.
Love bombing is a subtle attempt by the narcissist to erode a person from the inside all under the guise of it sounding sweet, kind, and full of positive and edifying language.
THE END RESULT OF LOVE BOMBING
The narcissist has many tactics up their sleeve, tactics designed to emotionally deflate their victim for their gain. Love bombing is just one of the tactics they keep hidden under this complex disorder of Narcissistic Personality Disorder.
Is it a winning battle? No. There is no winning the game with a narcissist. Their tank will always be on empty, no matter how much fuel is added and no matter how well you treat them.
When we take a deep dive into the emotional manipulation that is occurring through love bombing, we can receive greater clarity on the relationship and the not-so-hidden agenda.
Love-bombing is dangerous, as it starts the cycle of abuse and has a devastating outcome. Love bombing is not just empty compliments, the undertone is the part that is internalized by the victim which causes the most harm — and this is only one part of the cycle, which goes round and round as long as the relationship remains intact.
The battle is futile. It’s a war that cannot be won with a narcissist. When you play, you end up losing not only years, but what may start to occur is a shift in your mental health. Take time today for yourself, as you are important, you matter, and we want what is best for you.
Have you been love-bombed? Drop us a note and let us know your experience!