Create Cloud Accounts for Persistence

MITRE ATT&CK T1136.003 covers creating a cloud account to maintain access. The examples here are AWS IAM user creation and Google Cloud service-account creation. These procedures use the providers' public cloud control-plane APIs and require an already authenticated, authorized principal with AWS `iam:CreateUser` or Google `iam.serviceAccounts.create` permission; they do not require an internal network or execution foothold. Credential generation (including AWS access keys and Google service-account keys) and role assignments are separate behaviors and are excluded. This record retains a defensive threat summary without live account-creation commands; validate only with disposable identities in an authorized cloud lab and an approved cleanup plan.