New AWS Lambda Function URL Configuration Created

Ivan Saakov

Detects when a user creates a Lambda function URL configuration, which could be used to expose the function to the internet and potentially allow unauthorized access to the function's IAM role for AWS API calls. This could give an adversary access to the privileges associated with the Lambda service role that is attached to that function.

2024-12-19 00:00:00

None

ec541962-c05a-4420-b9ea-84de072d18f4

attack.initial-access attack.privilege-escalation

Community Rule

Ivan S

Merge PR #5016 from @saakovv - Add `New AWS Lambda Function URL Configuration Created`

2024-12-19