THREATOPS
THREAT OPSThreat News › Investigating Persistence Mechanisms in AWS

Investigating Persistence Mechanisms in AWS

medrapid7Published 2026-07-15

<h2>Overview</h2><p>In the cloud, your infrastructure may be short-lived, but an attacker’s persistence doesn't have to be. While your environment scales and changes in seconds, adversaries are embedding themselves into your IAM policies, Lambda functions, and federated sessions, creating invisible footholds that survive long after you believe an incident is closed.</p><p>Persistence in AWS is not

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://www.rapid7.com/blog/post/dr-investigating-aws-persistence-mechanisms