AWS IAM Account Unlocking
Description
Accepts user, to be enabled using AWS IAM connector. Enabling an account involves reattaching their login profile which will require setting a new password. This playbook produces a normalized observables output for each user.
- Type: Response
- Product: Splunk SOAR
- Apps: AWS IAM
- Last Updated: 2023-6-21
- Author: Lou Stella, Splunk
- ID: f15a4db3-b157-4225-86ae-c36ab78b50f2
- Use-cases:
Associated Detections
How To Implement
This input playbook requires the AWS IAM connector to be configured.
D3FEND
| ID | Technique | Definition | Category |
|---|---|---|---|
| D3-RUAA | Restore User Account Access | Restoring a user account's access to resources. | Restore Access |
Explore Playbook
Required field
Reference
source | version: 1