hacktricks-cloud/src/pentesting-cloud/aws-security/aws-post-exploitation/aws-control-tower-post-exploitation.md

AWS - Control Tower Post Exploitation

{{#include ../../../banners/hacktricks-training.md}}

Control Tower

{{#ref}} ../aws-services/aws-security-and-detection-services/aws-control-tower-enum.md {{#endref}}

Habilitar / Deshabilitar Controles

Para explotar aún más una cuenta, es posible que necesite deshabilitar/habilitar los controles de Control Tower:

aws controltower disable-control --control-identifier <arn_control_id> --target-identifier <arn_account>
aws controltower enable-control --control-identifier <arn_control_id> --target-identifier <arn_account>

{{#include ../../../banners/hacktricks-training.md}}