Skip to content
Threat Feed
Subscribe

Tag

Identity-and-Access-Management

1 brief RSS
high advisory

AWS IAM User Creation via Compromised EC2 Assumed Role

Adversaries leverage a compromised AWS EC2 instance's assumed IAM role to create new, unauthorized IAM users, establishing persistence within the AWS environment by granting themselves persistent access even after the initial compromise is remediated.

AWS Identity and Access Management +2 cloud aws persistence identity-and-access-management ec2 privilege-escalation iam
2r 3t 1i