VIEW RULE IN DATADOG

Description

An IAM role with privilege-escalation capability has a path to access sensitive data. If an attacker gains access to this role, they can leverage privilege escalation permissions to gain elevated access and reach resources containing sensitive information such as S3 buckets, RDS databases, or DynamoDB tables. Common escalation paths include creating access keys, modifying IAM policies, or assuming roles with higher privileges to access protected data.

Remediation

1. Review and adjust IAM role permissions to follow the principle of least privilege.
2. Apply IAM security best practices including least privilege and regular access reviews.