2026 Critical Cloud Control Plane Detection: Lambda Backdoor Resource Policy Gra

Ibrahim Saud@tektrix

•updated 5 days ago•0•0•0

Detects modifications to AWS Lambda functions that indicate potential backdooring, specifically unauthorized resource policy grants (lambda:InvokeFunction with a wildcard principal) or unexpected function code/configuration updates. This activity enables persistent, low-visibility execution by leveraging existing function permissions.