AWS API Call from Outside Organization

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•7•1•127

Detects API calls originating from AWS accounts that are not part of the organization, based on a reference list of approved AWS account IDs. This could indicate unauthorized access or activity from external entities.