Try in Splunk SOAR


Accepts user, to be enabled using AWS IAM connector. Enabling an account involves reattaching their login profile which will require setting a new password. This playbook produces a normalized observables output for each user.

  • Type: Response
  • Product: Splunk SOAR
  • Apps: AWS IAM
  • Last Updated: 2023-6-21
  • Author: Lou Stella, Splunk
  • ID: f15a4db3-b157-4225-86ae-c36ab78b50f2
  • Use-cases:

Associated Detections

How To Implement

This input playbook requires the AWS IAM connector to be configured.


ID Technique Definition Category
D3-RUAA Restore User Account Access Restoring a user account's access to resources. Restore Access

Explore Playbook


Required field


source | version: 1