The AWS Autopsy | Case #02 — IAM Privilege Escalation - Uber
How One IAM Misconfiguration Gave an 18-Year-Old Full AWS Access at Uber
Series: The AWS Autopsy — Real Cloud Breaches, Dissected Difficulty: Intermediate Lab Time: ~30 minutes AWS Cost: Near zero (IA
theawsautopsy.hashnode.dev12 min read
Ridam Darji
Breaking cloud. Building defense
Editor's Note: A reader correctly pointed out that no public source confirms Uber's exact IAM policy configuration. The lab demonstrates the documented IAM PrivEsc vector that becomes exploitable once AWS admin keys are obtained, not a Uber-specific claim.