Playbook: AWS IAM Account Unlocking

Description

Accepts user, to be enabled using AWS IAM connector. Enabling an account involves reattaching their login profile which will require setting a new password. This playbook produces a normalized observables output for each user.

Type: Response Date: 2023-06-21 Author: Lou Stella, Splunk ID: f15a4db3-b157-4225-86ae-c36ab78b50f2

Apps:

Associated Detections

How To Implement

This input playbook requires the AWS IAM connector to be configured.

Explore Playbook

explore

Required fields

Reference

source | version: 1