Risk Level: High (act today)
Rule ID: RTM-010
Cloud Conformity Real-Time Threat Monitoring and Analysis (RTMA) engine detected a failed authentication attempts in the AWS console
This rule can help you with the following compliance standards:
- APRA
- MAS
- NIST4
For further details on compliance standards supported by Conformity, see here.
This rule resolution is part of the Conformity Real-Time Threat Monitoring.
Security Content coming soon...
Important Note:
CloudTrail does not capture failed signing attempts for the Root account. This rule will only detect IAM user activity.
References
Publication date Jun 1, 2018