TrustedSec Red Team Guidance: Enumerating and Abusing Exposed AWS AKIA/ASIA Access Keys, and the CloudTrail Detection Points
TrustedSec published Part 1 of a red-team tradecraft series on what to do after finding plaintext AWS access keys during an engagement. It is educational content, not a report of a specific incident. It explains the difference between long-term AKIA keys (IAM user) and temporary ASIA keys (STS-issued, which also need a session token and a…