AWS Lambda

Reported Context (5)

In one case, Lambda function logs retrieved through cloudwatch_get_lambda_logs contained environment variables with API keys. Wiz Finds Internet-Exposed MCP Servers Leaking Sensitive Data and Cloud Credentials
Lambda functions Trend Micro’s Collector Scans Claude Enterprise Chats for Policy Violations
AWS Lambda, which was released in 2014 for serverless execution, puts the IAM role session credentials in the environment variables by using the variables AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and AWS_SESSION_TOKEN How AWS Services Provide Credentials—and Where Attackers May Find Them
Proof-of-work mining can abuse any sort of compute, such as EC2 instances, containers, or Lambda. Similarly, proof-of-storage could abuse any sort of storage. Therefore, someone could use multiple, massive EBS volumes, How Chia Mining Can Enable Cloud Storage Cryptojacking
Prevent Lambda URLs from being public How to Enforce Safer Security Defaults Across AWS Accounts

People (2)

MITRE ATT&CK (3)

Vendors (5)

Products (33)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.