Azure Add Federated Identity Credential
Adds an external workload trust to a Microsoft Entra application registration.
T1098.001: Additional Cloud Credentials
T1098.001: Additional Cloud Credentials
Adversaries may add adversary-controlled credentials to a cloud account to maintain persistent access to victim accounts and instances within the environment.
View on MITRE ATT&CK →AWS CreateAccessKey
Creates a new long-term access key for an IAM user, enabling programmatic access to AWS services.
AWS CreateLoginProfile
Creates a console password for an IAM user.
GCP google.iam.admin.v1.CreateServiceAccountKey
Creates a user-managed service-account key.
GCP google.iam.admin.v1.UploadServiceAccountKey
Uploads a public key certificate for a service account.
Azure Microsoft.Directory/servicePrincipals/credentials/update
Adds or updates credentials on an Entra service principal.
GCP storage.hmacKeys.create
Creates an HMAC key for a service account’s Cloud Storage XML API access.