CIRT insights: How to help prevent unauthorized account removals from AWS Organizations

The AWS Customer Incident Response Team works with customers to help them recover from active security incidents. As part of this work, the team often uncovers new or trending tactics used by various threat actors that take advantage of specific customer configurations and designs . Understanding these tactics can help inform your architecture decisions, improve your response plans, and detect these situations if they occur in your environment. This post examines a new…