Cloud Lateral Movement

MITRE ATT&CK T1021.007 covers using a valid or federated identity to log in to an accessible cloud service and act as that identity. These procedures demonstrate approved interactive sign-in to a tenant or account and verification of the active context only; sign-in alone does not prove subsequent lateral movement or resource access. The Azure PowerShell, Microsoft Graph PowerShell, and Google Cloud CLI paths are alternatives; use only the provider in scope rather than running them in sequence. Do not place passwords or tokens on command lines.