Skip to content
Threat Feed
Subscribe

Tag

Aws-Iam

1 brief RSS
high advisory

AWS IAM SAML Provider Creation for Persistence

Adversaries with administrative access to an AWS account can create rogue SAML Identity Providers (IdPs) to establish persistent, federated access to AWS resources that survives credential rotation, enabling them to assume roles and access resources by forging SAML assertions from an IdP they control.

AWS IAM cloud aws aws-iam identity-and-access-audit persistence
1r 3t