WHOAMI - GET PRINCIPAL NAME FROM KEYS

Summary from the TLDR InfoSec newsletter

Attackers often use get-caller-identity to find IAM roles linked to keys, but this API call can be monitored. This post shares a tactic to bypass these detections by querying an API that returns caller identity on a failed call.