Skip to content
Threat Feed
Subscribe

Tag

Credential-Abuse

1 brief RSS
medium advisory

Detection of Unauthorized AWS STS GetCallerIdentity Discovery

Adversaries with compromised credentials may abuse the AWS STS GetCallerIdentity API to verify access and identify the current account context, serving as a primary indicator of initial cloud reconnaissance.

AWS Security Token Service cloud aws cloudtrail discovery credential-abuse
1r 2t