Permissions Boundaries

AWS IAM Privilege Escalation: Paths, CloudTrail Events, and the Controls That Block Them

Twelve documented ways a limited IAM identity can raise its own permissions, the CloudTrail event each one leaves, and the AWS controls that block them. Commands and policies follow AWS documentation examples and the AWS CLI v2 reference.