AWS ModifyInstanceAttribute
Changes a supported EC2 instance attribute, including user data or security groups.
An adversary may attempt to modify a cloud account's compute service infrastructure to evade defenses. A modification to the compute service infrastructure can include the creation, deletion, or modification of one or more components such as compute instances, virtual machines, and snapshots.
View on MITRE ATT&CK →Changes a supported EC2 instance attribute, including user data or security groups.