Heimdall is an AWS security scanner that identifies privilege escalation paths that attackers could exploit. It analyzes over 10 AWS services and provides insights into IAM roles, detecting potential vulnerabilities and mapping them with MITRE ATT&CK.

AWS CIRT has launched the Threat Technique Catalog for AWS, aimed at providing customers with insights into adversarial tactics and techniques observed during security investigations. This catalog, developed in collaboration with MITRE, categorizes specific threats to AWS and offers guidance on mitigation and detection to enhance customer security.