Suspicious activity

Anomaly detection: Role created new ec2 instances and accessed new regions

Risk Level

Hazardous (3)

Platform(s)

Description

Unlike in the past, the role has started creating new EC2 instances and in addition initiated activity in new regions. This action may indicate of a presence of an unauthorized actor in the cloud environment, since this is an unusual activity of the role.

  • Recommended Mitigation

    It is recommended to review relevant CloudTrail event and principal that issued this API call to determine if this is a legit activity.

Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.