Is CloudTrail a Good Threat Modeling Tool?

If I was to model someone makes an AWS satellite service or 5G service, the minimum thing people should look for is an integration with CloudTrail. And so if you have a roll attached you could just grab the keys and use anywhere you want. So when you kind of came across an incident response for AppStream, because you didn't know much about the service, you decided to use CloudTrail as a way to detect things.

Transcript

Play full episode

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.