Tag
low
advisory
AWS IAM Roles Anywhere Profile Creation
2 rules 2 TTPsDetection of AWS IAM Roles Anywhere profile creation, potentially indicating an adversary establishing persistence or escalating privileges through rogue trust anchors to gain long-term external access.
IAM Roles Anywhere
aws
iam
rolesanywhere
persistence
privilege-escalation
2r
2t
medium
advisory
AWS IAM Roles Anywhere Trust Anchor Created with External CA
2 rules 2 TTPsThe creation of an AWS IAM Roles Anywhere Trust Anchor using an external Certificate Authority (CA) instead of an AWS-managed CA allows adversaries to establish persistent access by using their own CA to sign certificates for authentication.
IAM Roles Anywhere
aws
iam
rolesanywhere
persistence
2r
2t