Detecting the Use of Stolen AWS Lambda Credentials

The use of stolen credentials can then be detected when a logging event deviates from the baseline. A similar approach could be applied to detect AWS credentials stolen from other services.