enumerate AWS Direct Connect

rule:
  meta:
    name: enumerate AWS Direct Connect
    namespace: host-interaction/cloud/aws
    authors:
      - maximemorin@google.com
    scopes:
      static: function
      dynamic: call
    att&ck:
      - Discovery::Cloud Service Discovery [T1526]
    references:
      - https://unit42.paloaltonetworks.com/teamtnt-operations-cloud-environments/
      - https://docs.aws.amazon.com/cli/latest/reference/directconnect/index.html
  features:
    - or:
      - string: "aws directconnect describe-connections"
      - string: "aws directconnect describe-interconnects"
      - string: "aws directconnect describe-virtual-gateways"
      - string: "aws directconnect describe-virtual-interfaces"