Keep track of AWS user activity with SourceIdentity attribute
The SourceIdentity attribute in AWS’s Security Token Service (STS) can help defenders trace AWS role activity back to its source.
As we have discussed previously, adversaries who gain access to AWS accounts can abuse the Security Token Service (STS) ...
blogs.sretribe.net5 min read