/
Short Lived Accounts

Short Lived Accounts

An AWS account created and deleted in a short timeframe has the potential to be indicative of a user attempting to perform unwanted actions. CUIT Security and Infrastructure would want to make certain that the account was created and removed with the proper intentions and not as the result of an inside or outside party attempting to cover their tracks.

Related content

Root Account Activity
Root Account Activity
More like this
Mass Creation/Deletion of Instances
Mass Creation/Deletion of Instances
More like this
Missing Account Owner Information
Missing Account Owner Information
More like this
IAM Policy Changes
IAM Policy Changes
More like this
Unusual Instance Specifications and Types
Unusual Instance Specifications and Types
More like this
High Volume/Denied API Activity
High Volume/Denied API Activity
More like this