Skip to content
Threat Feed
Subscribe

Product

IAM Roles Anywhere

3 briefs RSS
high advisory

AWS IAM Roles Anywhere Profile Creation

Adversaries may create new AWS IAM Roles Anywhere profiles via the 'CreateProfile' API call to establish persistence or escalate privileges within an AWS environment by linking highly privileged roles to a rogue trust anchor, facilitating long-term external access.

IAM Roles Anywhere cloud aws persistence privilege-escalation
1r 2t
low advisory

AWS IAM Roles Anywhere Profile Creation

Detection of AWS IAM Roles Anywhere profile creation, potentially indicating an adversary establishing persistence or escalating privileges through rogue trust anchors to gain long-term external access.

IAM Roles Anywhere aws iam rolesanywhere persistence privilege-escalation
2r 2t
medium advisory

AWS IAM Roles Anywhere Trust Anchor Created with External CA

The creation of an AWS IAM Roles Anywhere Trust Anchor using an external Certificate Authority (CA) instead of an AWS-managed CA allows adversaries to establish persistent access by using their own CA to sign certificates for authentication.

IAM Roles Anywhere aws iam rolesanywhere persistence
2r 2t