https://www.elastic.co/docs/reference/security/prebuilt-rules/rules/integrations/aws/persistence_iam_roles_anywhere_trusted_anchor_created_with_external_ca
AWS IAM Roles Anywhere Trust Anchor Created with External CA | Prebuilt detection rules reference
Detects the creation of an AWS IAM Roles Anywhere Trust Anchor that uses an external certificate authority (CA) rather than an AWS-managed Certificate...
aws iam roles
https://thehackernews.com/2025/05/aws-default-iam-roles-found-to-enable.html?version=meter+at+null
AWS Default IAM Roles Found to Enable Lateral Movement and Cross-Service Exploitation
AWS default IAM roles with AmazonS3FullAccess exposed accounts to privilege escalation and lateral movement.
https://www.pluralsight.com/resources/videos/acg-fundamentals/aws-iam-policy-and-roles--how-to-generate-and-remove
AWS IAM Policy and Roles: How to generate and remove | Pluralsight
how to generateaws iampolicyrolesremove
https://github.com/aidansteele/openrolesanywhere
GitHub - aidansteele/openrolesanywhere: Open-source proof-of-concept client for AWS IAM Roles...
Open-source proof-of-concept client for AWS IAM Roles Anywhere - aidansteele/openrolesanywhere
proof of concept