AWS Snapshot Backup Exfiltration
Detects the modification of an EC2 snapshot's permissions to enable access from another account
Sigma

Detects the modification of an EC2 snapshot's permissions to enable access from another account

Already have an account?