Appendix: Reference material

This reference document contains an example of how AWS services and functionality can be mapped to a classic intrusion analysis framework. Although this example mapping is comprehensive, it’s not exhaustive. There are additional controls that are not included in the example mapping that you should identify and leverage as appropriate.

Topics

• Reconnaissance – Pre-Intrusion

• Reconnaissance – Post-Intrusion

• Exploit Development

• Delivery

• Exploitation

• Installation

• Command and Control

• Actions on Objectives

• Control Name Descriptions

• Prioritizing Control Implementations