https://blog.threatbreach.io/posts/aws-threat-detection-part---3---1/