iam-privilege-escalation

当只有低权限凭证，需要确认能不能被跳升为高权限时用。通过枚举现有的 IAM 策略与权限组合（比如能被串联利用的权限路径）来绘出升级路径并关闭可被滥用的环节。常见于 AWS 环境的权限审计，目标是把“策略赋值错位”这种配置漏洞堵住。

## Purpose

In the cloud, privilege escalation is rarely an exploit — it's a policy that grants one permission too many. `iam:PassRole` plus `lambda:CreateFunction`, or `iam:CreatePolicyVersion` on your own role, and a read-only identity becomes admin. This skill covers enumerating what a set of credentials can do and finding the path up, then removing it.

Scoped to AWS here because it's the most common; the reasoning (find a permission that grants more permissions) transfers to Azure and GCP.

## When to use it

Authorised cloud assessments, or auditing your own account for latent escalation paths. Assume-breach reviews especially: "if this CI role leaked, could it become admin?"

Only aga