Skip to content
Threat Feed
Subscribe

Tag

Dynamodb

3 briefs RSS
high advisory

AWS DynamoDB Table Exported to S3

Adversaries may exfiltrate sensitive data by leveraging compromised AWS credentials to perform the DynamoDB ExportTableToPointInTime operation, moving database contents into an Amazon S3 bucket, which facilitates unauthorized collection and exfiltration of information.

DynamoDB +1 aws cloud exfiltration
1r 2t
low advisory

AWS DynamoDB Table Export to S3 Detection

Detects the initial export of an AWS DynamoDB table to S3, potentially indicating reconnaissance or exfiltration by a compromised account or insider threat.

AWS DynamoDB +2 aws dynamodb exfiltration
2r 2t
low advisory

AWS DynamoDB Scan by Unusual User

Detection of unusual DynamoDB scan activity in AWS environments, potentially indicating exfiltration of sensitive information by an adversary using compromised credentials or a rogue insider.

DynamoDB aws exfiltration cloudtrail
2r 3t