Skip to content
attack.paths
Sign in
← LibraryTechnique entry
C-AWS-SSM-RUNLateral Movement

AWS SSM RunCommand / StartSession

ssm:SendCommand / StartSession on a target instance — execute as root without touching SSH.

§ Where this technique fits

C-AWS-SSM-RUN is catalogued under the Lateral Movement tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.