MITRE ATT&CK in Amazon Web Services (AWS): A Defender's Cheat Sheet
In order to give you a jump start on investigations in your own AWS environment, Expel has mapped the AWS services in which these tactics often originate (thanks, crafty attackers) along with the API calls the attackers make to execute on said techniques.
Download this guide for a breakdown of the most popular tactics attackers used during attacks in AWS.