domains / families / security / performing-aws-privilege-escalation-assessment

performing-aws-privilege-escalation-assessment

separate

'Performing authorized privilege escalation assessments in AWS environments

When to use

• When conducting authorized penetration testing of AWS IAM configurations
• When validating that IAM policies follow the principle of least privilege
• When assessing the blast radius of a compromised AWS credential
• When building security reviews for IAM role and policy changes in CI/CD pipelines
• When evaluating cross-account trust relationships for privilege escalation risks

When not to use

• unauthorized testing against AWS accounts
• assessing non-IAM attack vectors (SSRF, application vulnerabilities)
• substitute for comprehensive cloud penetration testing

Skill page

Source