T1552.005

Workload Identities Have a Home Address — So Watch Where They Get Used

Cloud hands every workload a privileged identity by default. Unlike other machine identities it's bound to one host — use from elsewhere is theft.