Tag: STS

STS

All events with tag STS.

AWS AssumeRole

Returns temporary security credentials for assuming an IAM role. Allows an entity (user, service, or account) to act with the role's permissions.

Cloud Service: AWS - STS

Tactics:

Initial Access Privilege Escalation Lateral Movement Stealth

Techniques:

T1078.004T1550.001

Tags:

AWS STS

AWS AssumeRoleWithSAML

Exchanges a validated SAML assertion for temporary IAM role credentials.

Cloud Service: AWS - STS

Tactics:

Initial Access Privilege Escalation Lateral Movement Stealth

Techniques:

T1078.004T1550.001

Tags:

AWS STS

AWS AssumeRoleWithWebIdentity

Exchanges a web-identity token for temporary IAM role credentials.

Cloud Service: AWS - STS

Tactics:

Initial Access Privilege Escalation Lateral Movement Stealth

Techniques:

T1078.004T1550.001

Tags:

AWS STS

AWS GetFederationToken

Issues temporary federated-user credentials using long-term IAM-user credentials.

Cloud Service: AWS - STS

Tactics:

Initial Access Persistence Privilege Escalation Stealth

Techniques:

T1078.004

Tags:

AWS STS

AWS GetSessionToken

Issues temporary credentials for an IAM user, optionally with MFA context.

Cloud Service: AWS - STS

Tactics:

Initial Access Persistence Privilege Escalation Stealth

Techniques:

T1078.004

Tags:

AWS STS