AWS ChangePassword
Changes the calling IAM user’s console password.
T1531: Account Access Removal
T1531: Account Access Removal
Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users. Accounts may be deleted, locked, or manipulated (ex: changed credentials, revoked permissions for SaaS platforms such as Sharepoint) to remove access to accounts....
View on MITRE ATT&CK →AWS DeleteAccessKey
Deletes an IAM access key permanently.
AWS DeleteLoginProfile
Deletes the target user’s AWS console password without deleting access keys.
AWS DeleteUser
Deletes an IAM user after dependent credentials and associations are removed.
GCP google.iam.admin.v1.DeleteServiceAccount
Deletes a service account, potentially disrupting dependent workloads.
Azure Microsoft.Authorization/roleAssignments/delete
Deletes an Azure RBAC role assignment.
Azure Microsoft.Storage/storageAccounts/regenerateKey/action
Regenerates a selected Azure Storage account access key.
AWS RemoveUserFromGroup
Removes an IAM user from a group, changing the policies that apply to the user.
AWS UpdateAccessKey
Sets an IAM access key to Active or Inactive.
AWS UpdateLoginProfile
Updates an IAM user console password or password-reset requirement.