Robuta

https://www.elastic.co/docs/reference/security/prebuilt-rules/rules/integrations/aws/persistence_iam_roles_anywhere_trusted_anchor_created_with_external_ca AWS IAM Roles Anywhere Trust Anchor Created with External CA | Prebuilt detection rules reference Detects the creation of an AWS IAM Roles Anywhere Trust Anchor that uses an external certificate authority (CA) rather than an AWS-managed Certificate... aws iam roles https://thehackernews.com/2025/05/aws-default-iam-roles-found-to-enable.html?version=meter+at+null AWS Default IAM Roles Found to Enable Lateral Movement and Cross-Service Exploitation AWS default IAM roles with AmazonS3FullAccess exposed accounts to privilege escalation and lateral movement. https://www.pluralsight.com/resources/videos/acg-fundamentals/aws-iam-policy-and-roles--how-to-generate-and-remove AWS IAM Policy and Roles: How to generate and remove | Pluralsight how to generateaws iampolicyrolesremove https://github.com/aidansteele/openrolesanywhere GitHub - aidansteele/openrolesanywhere: Open-source proof-of-concept client for AWS IAM Roles... Open-source proof-of-concept client for AWS IAM Roles Anywhere - aidansteele/openrolesanywhere proof of concept