AWS AuthorizeDBSecurityGroupIngress
Authorizes ingress to an RDS DB security group through a legacy networking API.
T1686.001: Cloud Firewall
T1686.001: Cloud Firewall
Adversaries may disable or modify a firewall within a cloud environment to bypass controls that limit access to cloud resources.
View on MITRE ATT&CK →AWS AuthorizeSecurityGroupEgress
Adds outbound allow rules to an EC2 security group.
AWS AuthorizeSecurityGroupIngress
Adds inbound allow rules to an EC2 security group.
GCP compute.firewalls.delete
Deletes a VPC firewall rule.
GCP compute.firewalls.patch
Patches an existing VPC firewall rule.
AWS CreateNetworkAclEntry
Adds an inbound or outbound allow/deny rule to a VPC network ACL.
AWS DeleteNetworkAcl
Deletes a nondefault VPC network ACL that has no subnet associations.
AWS DeleteNetworkAclEntry
Deletes a numbered inbound or outbound rule from a VPC network ACL.
AWS DeleteRuleGroup
Deletes an AWS WAFv2 rule group identified by name, ID, and scope.
AWS DeleteWebACL
Deletes an unassociated AWS WAFv2 web ACL not managed by Firewall Manager.
Azure Microsoft.Network/networkSecurityGroups/delete
Deletes an Azure network security group after its resource associations are removed.
Azure Microsoft.Network/networkSecurityGroups/securityRules/write
Creates or updates a rule in an Azure network security group.
AWS ModifyDBInstance
Modifies RDS DB instance settings, subject to parameter-specific application rules.
Azure VaultPatch
Updates Azure Key Vault properties through a management-plane write.