{{#include ../../../../banners/hacktricks-training.md}}
For more information check:
{{#ref}} ../../aws-services/aws-stepfunctions-enum.md {{#endref}}
Backdoor a step function to make it perform any persistence trick so every time it's executed it will run your malicious steps.
If the AWS account is using aliases to call step functions it would be possible to modify an alias to use a new backdoored version of the step function.
{{#include ../../../../banners/hacktricks-training.md}}