IAM privilege escalation

In AWS, unique combinations of privileges assigned to a principal can allow an attacker that has compromised the principal to escalate their privileges through a series of API calls.