Tag
low
advisory
Detection of Unauthorized Amazon Bedrock Foundation Model Access Attempts
1 rule 1 TTPDetection of failed API calls attempting to enable Amazon Bedrock foundation model access, serving as a high-signal indicator for credential boundary-testing and potential LLMjacking.
Bedrock
cloud
aws
llmjacking
persistence
1r
1t
high
advisory
LLMjacking via Compromised AWS Long-Term IAM Credentials
1 rule 2 TTPsAdversaries are abusing stolen long-term AWS IAM access keys to perform unauthorized reconnaissance and high-cost model inference within Amazon Bedrock.
Amazon Bedrock
cloud
llm
aws
llmjacking
identity-audit
1r
2t