Enumeration

Privesc:

AWS IAM Privilege Escalation – Methods and MitigationRhino Security Labs

AWS IAM Privilege Escalation - Methods and Mitigation - Part 2Rhino Security Labs

Cool places to look:

# AWS keys etc:
/home/*/.aws/credentials
/root/.aws/credentials
/proc/self/environ
env