AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console

Published

2024-08-22 16:00

Collected

2026-08-29 01:28

---
id: 7128
title: "AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/aws-console-session-traceability-how-attackers-obfuscate-identity-through-aws-console"
published_at: "2024-08-22T16:00:00Z"
tags: ["cloud", "cloud-security", "aws", "identity", "cloudtrail", "threat-research", "session-traceability"]
phying_url: "https://phying.com/item/7128"
lang: en
---

# AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console

## Summary

Wiz researchers detail Console Conceal: a technique that abuses default AWS setups without SourceIdentity to obfuscate who performed console actions in CloudTrail, plus mitigations and investigation steps.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2024-08-22T16:00:00Z
- **Original:** https://www.wiz.io/blog/aws-console-session-traceability-how-attackers-obfuscate-identity-through-aws-console
- **Phying News:** https://phying.com/item/7128