Cloud-Specific TTPs

The tactics, techniques, and procedures attackers use that are unique to cloud environments, such as abusing access keys, assuming roles across accounts, querying instance metadata for credentials, and disabling cloud logging.