ABUSE OF SERVERLESS COMPUTING IN CLOUD ENVIRONMENTS REVISION QUESTIONS WITH VERIFIED ANSWERS

ABUSE OF SERVERLESS COMPUTING IN CLOUD ENVIRONMENTS REVISION QUESTIONS WITH VERIFIED ANSWERS Account Use Policies - ANSWER-Policies restricting access to serverless functions. Adversaries - ANSWER-Malicious actors exploiting cloud resources for attacks. Anomalous Behavior Detection - ANSWER-Identifying unusual activities in serverless executions. Application Log - ANSWER-Log capturing application activity and function invocations. Apps Script - ANSWER-Google tool for automating tasks in Google Workspace. Arbitrary Code Execution - ANSWER-Running unauthorized code in cloud environments. AWS Lambda - ANSWER-Serverless compute service for running code in AWS. Cloud Service Modification - ANSWER-Changes made to cloud services or resources. CloudWatch Events Rule - ANSWER-Automated trigger for AWS Lambda functions. Conditional Access Policies - ANSWER-Rules limiting user access based on conditions. Crypto-mining Malware - ANSWER-Malicious software using resources for cryptocurrency mining. Event Triggered Execution - ANSWER-Functions invoked automatically by cloud events. High-risk OAuth Scopes - ANSWER-Sensitive permissions in OAuth that require careful management. IAM:PassRole - ANSWER-AWS permission allowing role delegation to functions. ceAAs - ANSWER-Google Cloud permission for service account impersonation. Persistent Execution - ANSWER-Continuous execution of functions over time. Power Automate - ANSWER-Microsoft service for automating workflows between applications. Resource Hijacking - ANSWER-Unauthorized use of cloud resources for malicious purposes. Serverless Computing - ANSWER-Cloud services allowing execution without server management. Serverless Function Modifications - ANSWER-Changes to serverless functions affecting their behavior. Unauthorized Access - ANSWER-Access to resources without proper permissions. User Account Management - ANSWER-Managing user permissions for serverless resources.