tag: Aws-Iam · 1 items
- Engineer — Learn: Covers AWS’s automated response to leaked IAM credentials via managed policy quarantine and CloudTrail monitoring — useful design context for incident runbooks and understanding AWS-side controls, but no patch or immediate action required.
- SOC/IR — Learn: Details on CloudTrail signals and GitHub secret scanning patterns for detecting exposed IAM credentials are worth incorporating into hunting playbooks, though no active exploitation or IOCs are present here.
- Leader — Skip