AWS Cross Account Activity From Previously Unseen Account
This search looks for AssumeRole events where an IAM role in a different account is requested for the first time.
This content is not mapped to any local saved search. Add mapping
AWS Cross Account Activity From Previously Unseen Account Help
You must be ingesting your cloud infrastructure logs from your cloud provider. You should run the baseline search
Open in Search