This page lists the unique sets of permissions that could allow one AWS IAM principal to either escalate their own privileges or access another AWS IAM principal.
Loading privilege escalation paths...
PATHFINDING.CLOUD
Understand, Detect & Demonstrate AWS IAM Privilege Escalation