---
id: 7896
title: "Pivoting Clouds in AWS Organizations – Part 1: Leveraging Account Creation, Trusted Access, and Delegated Admin"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/pivoting-clouds-aws-organizations-part-1/"
published_at: "2023-03-06T00:00:00Z"
tags: ["cloud", "cloud-security", "aws", "privilege-escalation", "red-team", "penetration-testing", "lateral-movement"]
phying_url: "https://phying.com/item/7896"
lang: en
---

# Pivoting Clouds in AWS Organizations – Part 1: Leveraging Account Creation, Trusted Access, and Delegated Admin

## Summary

Part one on pivoting across AWS Organizations: account boundaries, the 'easy win' of attacker-created member accounts, and abuse of trusted access, delegated administration and IAM Access Analyzer.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2023-03-06T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/pivoting-clouds-aws-organizations-part-1/
- **Phying News:** https://phying.com/item/7896