Undocumented AWS APIs

Techniques for avoiding CloudTrail detection

Overview

Nick Frichetten has published a tool aws-api-models that looks for undocumented API models. Historically, there have been undocumented APIs that are not logged to CloudTrail or detected by AWS GuardDuty.