2026 Critical Cloud Control Plane Detection: Mass Bulk Secret Retrieval Across AWS/Azure/GCP Secrets Stores

Ibrahim Saud@tektrix

•updated 27 days ago•4•0•13

Detects high-volume retrieval of secrets by a single principal within a one-hour window across AWS Secrets Manager, Azure Key Vault, and Google Cloud Secret Manager. This behavior is indicative of bulk credential harvesting or automated sensitive data exfiltration following unauthorized access or privilege escalation in cloud environments.