Hacktricks Aws //free\\

You search for iam:PassRole . The page explains:

When you go to cloud.hacktricks.xyz (or the main book.hacktricks.xyz and navigate to Cloud/AWS), you will find these specific, actionable sections: hacktricks aws

You now realize iam:PassRole + ec2:RunInstances is effectively full admin access. You revoke it. You search for iam:PassRole

Focus on high-value services like S3 (data storage), EC2 (compute), and Lambda (serverless functions), which are common entry points for lateral movement. 2. The Art of Privilege Escalation you will find these specific