T1535: Unused/Unsupported Cloud Regions

Adversaries may create cloud instances in unused geographic service regions in order to evade detection. Access is usually obtained through compromising accounts used to manage cloud infrastructure.

View on MITRE ATT&CK →

AWS EnableRegion

Enables a previously disabled AWS region for the account, making its services available for use.

Cloud Service: AWS - Account Management

Tactics:

Defense Evasion Persistence

Techniques:

T1535 T1578

Tags:

AWS Account Management