AWS DEFAULT IAM ROLES FOUND TO ENABLE LATERAL MOVEMENT AND CROSS-SERVICE EXPLOITATION

Summary from the TLDR InfoSec newsletter

Researchers discovered dangerous default IAM roles in AWS services that grant excessive permissions like full S3 access. These roles enable attackers to escalate privileges and move laterally across services, potentially compromising entire AWS accounts. AWS has modified the AmazonS3FullAccess policy in response.