Skip to content
New 2026 Offensive Security Cohort Enrolling Now
devwalls security

research & field notes

Technical breakdowns, vulnerability research, adversary simulation playbooks, and practical defense guidance written by practising security engineers.

All Articles Threat Intelligence Penetration Testing Cloud Security Red Teaming Vulnerability Research Application Security Digital Forensics & OSINT Security Advisory
Chaining AWS IAM Roles into Cross-Account Takeover
Cloud Security
7 min read 19 Apr 2026

Chaining AWS IAM Roles into Cross-Account Takeover

How misconfigured sts:AssumeRole trust policies and excessive wildcards in secondary AWS accounts allow attackers to escalate from a single container breach to organisation-wide administrative control.

Emeka Vance · 19 Apr 2026
Read →
Start a Conversation

Need offensive testing for your organisation?

A twenty-minute call is usually enough to tell whether we are the right fit. If we are not, we will say so.

send a message → chat on WhatsApp