This article details the evolution of AWS privilege escalation, highlighting the shift from IAM policy abuse to service-based execution and AI orchestration. It discusses the various escalation techniques, including those introduced by new AI services like Bedrock and AgentCore, and outlines which actions can be effectively blocked by security policies.