This article details the evolution of AWS privilege escalation, highlighting the shift from IAM policy abuse to service-based execution and AI orchestration. It discusses the various escalation techniques, including those introduced by new AI services like Bedrock and AgentCore, and outlines which actions can be effectively blocked by security policies.

Amazon has introduced the Application Recovery Controller (ARC) Region switch, a fully managed service that allows organizations to effectively plan and execute multi-Region application recovery. This service enables users to orchestrate and automate recovery tasks across AWS Regions, ensuring confidence in their failover strategies while streamlining the process of switching operations during operational events. It features a centralized dashboard, customizable recovery plans, and various execution blocks to enhance the recovery process.