AWS Privilege Escalation Using IAM Login Profile

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•0•0•0

Detect when a user creates or updates a login profile for another user and escalates privileges using this new user from the same IP.