Overview
The Privileged Threat Analytics (PTA) layer within the Idira Privileged Access Management (PAM) platform collects data to detect, alert and respond to high risk activity through continuous monitoring.
This integration extends PTA into your AWS environments for IAM and EC2 Virtual Machine logs, helping address the challenge of monitoring privileged activity in AWS while detecting, alerting, and responding to high-risk activity. These capabilities improve the efficiency of Cloud security teams.
Capabilities of this integration include:
* Detect unmanaged Access Keys and Passwords for IAM accounts
* Detect the most privileged accounts in AWS
* Detect compromised privileged IAM accounts and EC2 users
* Detect activity that bypassed managed credentials
* alert on suspected credentials theft attempts
* Rotate compromised credentials and access key to remove attackers from compromised accounts