Editor's Note: A reader correctly pointed out that no public source confirms Uber's exact IAM policy configuration. The lab demonstrates the documented IAM PrivEsc vector that becomes exploitable once AWS admin keys are obtained, not a Uber-specific claim.