T1535: Unused/Unsupported Cloud Regions

T1535: Unused/Unsupported Cloud Regions

Adversaries may create cloud instances in unused geographic service regions in order to evade detection. Access is usually obtained through compromising accounts used to manage cloud infrastructure.

View on MITRE ATT&CK →

AWS EnableRegion

Requests activation of an opt-in AWS Region for an account.

Cloud Service: AWS - Account Management

Tactics:

Stealth

Techniques:

T1535

Tags:

AWS Account Management