# IAM Privilege Escalation (CTF challenge)

> You are the low-privileged AWS IAM user dev-ci. Your attached policy looks locked down, but it hides a privilege-escalation primitive.

Canonical: https://codelivly.com/ctf/challenges/iam-privilege-escalation

| | |
|---|---|
| Category | Cloud Security |
| Difficulty | Hard |
| Points | 2000 |
| Estimated time | 45 min |
| Type | Live instance |
| Solves | 14 |
| Author | Codelivly |

You are the low-privileged AWS IAM user dev-ci. Your attached policy looks locked down, but it hides a privilege-escalation primitive. Find it, escalate to admin, and read the flag from the admin-only secret. The simulated IAM API honestly enforces your permissions — you can only use what you're actually allowed. Your own isolated instance; the flag is unique to you.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)