RCE via Cloud VM Agent

Adversaries may use valid cloud or federated identities to access cloud management services and operate cloud-hosted resources. The commands below demonstrate an AWS Systems Manager Run Command variant of this broader technique: authenticate to IAM Identity Center, identify the active account, select an SSM managed node, and run a harmless identity query. SaaS and other provider-specific procedures are outside this example.